220-1101 · Question #876
Following a security breach that revealed employee username and password information, an organization would like to implement additional security for users logging in to company devices. Which of the
The correct answer is D. One-time tokens. One-time tokens (OTP/MFA) are the best solution after credentials have been compromised. Since attackers already have the stolen usernames and passwords, a second factor - a token that expires after a single use - renders those stolen credentials useless on their own. Biometric a
Question
Following a security breach that revealed employee username and password information, an organization would like to implement additional security for users logging in to company devices. Which of the following would be the best solution for the organization to use?
Options
- ABiometric authentication
- BPeer-reviewed log-ins
- CLog-in scripts
- DOne-time tokens
How the community answered
(52 responses)- A12% (6)
- B6% (3)
- C2% (1)
- D81% (42)
Explanation
One-time tokens (OTP/MFA) are the best solution after credentials have been compromised. Since attackers already have the stolen usernames and passwords, a second factor - a token that expires after a single use - renders those stolen credentials useless on their own. Biometric authentication (A) could also work but requires hardware deployment; OTP/tokens are software-deployable and directly address credential theft. Peer-reviewed logins and login scripts do not add meaningful authentication security.
Topics
Community Discussion
No community discussion yet for this question.