200-301 · Question #1565
Which solution is appropriate when mitigating password attacks where the attacker was able to sniff the clear-text password of the system administrator?
The correct answer is B. multifactor authentication using two separate authentication sources. Multifactor authentication (MFA) adds an additional layer of security beyond just a username and password. By requiring a second form of authentication (such as a temporary code sent to a mobile device, a fingerprint scan, or a hardware token), even if an attacker has obtained th
Question
Which solution is appropriate when mitigating password attacks where the attacker was able to sniff the clear-text password of the system administrator?
Options
- Anext-generation firewall to keep stateful packet inspection
- Bmultifactor authentication using two separate authentication sources
- CACL to restrict incoming Telnet sessions "admin" accounts
- DIPS with a btock list of known attack vectors
How the community answered
(36 responses)- A8% (3)
- B83% (30)
- C3% (1)
- D6% (2)
Explanation
Multifactor authentication (MFA) adds an additional layer of security beyond just a username and password. By requiring a second form of authentication (such as a temporary code sent to a mobile device, a fingerprint scan, or a hardware token), even if an attacker has obtained the clear-text password, they would still need access to the second authentication factor to gain entry. This significantly reduces the risk of unauthorized access.
Topics
Community Discussion
No community discussion yet for this question.