An information security professional is reviewing user access controls on a customer-facing application. The application must have multi-factor authentication (MFA) in place. The application currently requires a username and password to login. Which of the following options would BEST implement MFA?

Question

leonie lira · Accepted Answer

Have the user answer a secret question that is known to them

leonie lira · Answer

Geolocate the user and compare to previous logins

leonie lira · Answer

Require a pre-selected number as part of the login

leonie lira · Answer

Enter an automatically generated number from a hardware token

Question list

List of questions

Question 1

(1)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 1482 - CISSP discussion

Suggested answer: C

0 comments