When can 2FA/MFA be prompted? (Choose two.)

Question

Options

• Awhen clicking on an app file while in the User Portal
• Bafter clicking on the Forgot Your Password link
• Cwhen making changes to a policy while in the Admin Portal
• Dwhen exporting a compliance report while in the Admin Portal
• Ewhen adding a new web app

• A
  88% (23)
• D
  4% (1)
• E
  8% (2)

Explanation

Option A is correct because MFA can be triggered as an extra layer of verification when a user in the User Portal attempts to launch an application - this is a core use case for MFA policies, where access to sensitive apps requires step-up authentication before granting entry.

Note: The question says "choose two," but only A is provided as a correct answer here - the second correct answer may be missing from the key you were given. Review your source material for a second valid scenario (commonly, MFA may also be triggered when accessing the Admin Portal itself).

Why the distractors are wrong:

• B (Forgot Your Password): This flow uses an identity recovery mechanism (email/SMS reset link), not an MFA challenge - it's about proving ownership of the account, not re-verifying an active session.
• C (Making policy changes in Admin Portal): Simply modifying a policy mid-session doesn't typically re-trigger MFA; MFA would have been prompted at Admin Portal login, not during navigation within it.
• D (Exporting a compliance report): Like C, this is an in-session admin action - not an event that independently triggers a new MFA prompt.
• E (Adding a new web app): This is an administrative configuration task, not an authentication event that would prompt MFA.

Memory tip: Think of MFA as a doorway, not a hallway - it fires at the moment you enter a protected resource (like launching an app), not while you're already moving around inside a portal you've already authenticated into.

No community discussion yet for this question.