Which two attack vectors are protected by MFA? (Choose two.)

Endpoints are a primary target for credential theft and unauthorized logins; MFA enforces an additional authentication factor so that a stolen password alone is insufficient to access endpoint resources. Solutions like Cisco Duo integrate directly with endpoint login flows to block access when the second factor cannot be satisfied.

Mobile devices are explicitly protected by MFA solutions such as Cisco Duo, which delivers push notifications or time-based one-time passcodes to the mobile device to confirm user identity. Because mobile devices are frequently used for both personal and corporate access, MFA ensures a compromised credential cannot be used without the registered second factor tied to the device.

Cloud access security is primarily addressed by CASB solutions and identity federation protocols; MFA is not the attack-vector-level control mapped to cloud in Cisco's defined security framework.

Web-based attack vectors are mitigated by secure web gateways and DNS-layer security such as Cisco Umbrella, not by MFA as the primary control.

Data center attack vectors are addressed through firewalls, micro-segmentation, and network access controls rather than MFA as the principal mapped defense.