nerdexam
CompTIA

220-1101 · Question #876

Following a security breach that revealed employee username and password information, an organization would like to implement additional security for users logging in to company devices. Which of the

The correct answer is D. One-time tokens. One-time tokens (OTP/MFA) are the best solution after credentials have been compromised. Since attackers already have the stolen usernames and passwords, a second factor - a token that expires after a single use - renders those stolen credentials useless on their own. Biometric a

Networking

Question

Following a security breach that revealed employee username and password information, an organization would like to implement additional security for users logging in to company devices. Which of the following would be the best solution for the organization to use?

Options

  • ABiometric authentication
  • BPeer-reviewed log-ins
  • CLog-in scripts
  • DOne-time tokens

How the community answered

(52 responses)
  • A
    12% (6)
  • B
    6% (3)
  • C
    2% (1)
  • D
    81% (42)

Explanation

One-time tokens (OTP/MFA) are the best solution after credentials have been compromised. Since attackers already have the stolen usernames and passwords, a second factor - a token that expires after a single use - renders those stolen credentials useless on their own. Biometric authentication (A) could also work but requires hardware deployment; OTP/tokens are software-deployable and directly address credential theft. Peer-reviewed logins and login scripts do not add meaningful authentication security.

Topics

#Multi-Factor Authentication#One-Time Password#Login Security#Authentication Methods

Community Discussion

No community discussion yet for this question.

Full 220-1101 Practice