Post-Knowledge-Assessment (CR – Multi-Factor Authentication Setup)

Which of the following is NOT a factor used in Multi-Factor Authentication (MFA)?

Which of the following is the primary reason MFA adoption is critical in modern security?

Jessica is using a shared workstation at her company. What additional security measure should she take when using MFA?

It is acceptable to use the same MFA method for all users without considering their roles or risks.

John’s company uses a passwordless authentication system that allows employees to log in using Windows Hello facial recognition. Which security principle does this approach align with?

A hacker successfully steals an employee’s password but is unable to access their account due to an additional security requirement. What does this scenario demonstrate?

Which of the following authentication methods is most resistant to phishing attacks?

What is the primary reason for using FIDO2-compliant security keys over traditional MFA methods?

A company wants to balance security and usability when deploying MFA. Which of the following is the best approach?

Lisa, a software developer, is implementing MFA for a web application. She decides to use SMS-based OTPs. Which security risk should she be most concerned about?

What is the best approach for handling users who lose access to their MFA device?

Which factor makes adaptive authentication more secure?

Which of the following statements about hardware security tokens is true?

Which of the following is a common implementation of “something you have” in MFA?

A company requires users to enter an MFA code only when accessing high-risk applications or logging in from an unknown device. What is this strategy called?

James is setting up MFA for a group of contractors who will only need access for a short period. What is the best way to enforce security?

An organization implements a security measure where users are prompted for MFA only when logging in from new devices or locations. This is an example of?

David is configuring MFA for remote access to company systems. Which of the following options provides the highest security level?

Mark logs into his company’s VPN from a new device and is prompted for additional authentication beyond his usual credentials. What type of security control is this?

A company’s employees report that they are frequently asked for MFA re-authentication, even when logging in from the same device. What is the most likely cause?