Which type of attack does multifactor authentication help protect against?

Cross-site scripting (XSS) attacks exploit vulnerabilities in web applications to inject malicious scripts; MFA does not directly prevent XSS vulnerabilities or attacks.

Multifactor authentication (MFA) significantly enhances security against brute-force attacks because even if an attacker manages to guess or crack a user's password, they still need to provide a second, distinct form of authentication (e.g., a code, biometric) to gain access. This makes it much harder for attackers to succeed with password-guessing methods alone.

SQL injection attacks exploit vulnerabilities in database queries to execute malicious code; MFA protects authentication, not database-level code injection vulnerabilities.

While MFA can make it harder for an attacker to re-authenticate if credentials are intercepted in a man-in-the-middle (MITM) attack, it does not prevent the MITM attack itself or the initial interception of traffic.