Based on the 'User Account Settings' shown in the exhibit, which of the following statements is correct?

Question

Options

• AUsers are allowed to answer security questions as part of the multi-factor authentication process.
• BThere is no requirement to configure at least one user-defined question.
• CYou can choose to answer at least one admin-defined question.
• DIt is optional to keep the minimum number of characters required in answers to three.

• A
  87% (53)
• B
  3% (2)
• C
  8% (5)
• D
  2% (1)

Explanation

Option A is correct because the exhibit's User Account Settings panel includes security questions as a configured authentication method, meaning they function as a valid factor within the multi-factor authentication workflow - users are prompted to answer them during login verification.

Why the distractors are wrong:

• B is incorrect because the settings typically enforce a minimum requirement for user-defined questions (e.g., at least one must be set), making configuration mandatory, not absent.
• C is incorrect because admin-defined questions are generally required, not something the user can optionally choose to answer - the word "can choose" misrepresents the mandatory nature of those questions.
• D is incorrect because the minimum character length for answers (commonly three characters) is an enforced policy setting, not an optional one - it cannot be bypassed.

Memory tip: Watch for answer choices that flip mandatory/optional language. In security settings exhibits, requirements like "must configure at least one" or "minimum character length" are almost always enforced. Any choice saying these rules are absent or optional is a red flag - and any choice correctly linking security questions to MFA is likely your answer.

No community discussion yet for this question.