Which settings can help minimize the number of 2FA / MFA prompts? (Choose two.)

Question

Options

• AChallenge Pass-Through Duration
• BRADIUS Connections
• COATH OTP
• DIP Address filter
• EPort mapping

• A
  2% (1)
• B
  9% (4)
• C
  7% (3)
• D
  80% (35)
• E
  2% (1)

Explanation

IP Address filter (D) and Challenge Pass-Through Duration (A) are the two correct answers. An IP Address filter lets administrators designate trusted networks (e.g., corporate offices) where MFA is skipped entirely, reducing prompts for users on known-safe IPs. Challenge Pass-Through Duration sets a time window during which a previously authenticated user won't be re-challenged, so they aren't prompted on every session within that period.

Why the distractors are wrong:

• B. RADIUS Connections - RADIUS is an authentication protocol, not a setting that controls prompt frequency.
• C. OATH OTP - This is a type of OTP standard; choosing it adds an MFA method, it doesn't reduce how often you're asked.
• E. Port mapping - A network routing/firewall concept with no bearing on authentication frequency.

Memory tip: Think "reduce prompts = reduce when you check (IP filter) + reduce how often you re-check (pass-through duration)." Both answers control scope and frequency of challenges, while the distractors are about how authentication works, not whether it fires.

Note: The answer key you provided lists only D, but since the question says "Choose two," A and D together is the expected complete answer. Verify against your source material.

No community discussion yet for this question.