CAS-003 · Question #480
A Chief Information Security Officer (CISO) implemented MFA for all accounts in parallel with the BYOD policy. After the implementation, employees report the increased authentication method is causing
The correct answer is D. Allow the use of SSO.. The core problem is that users must authenticate separately (including MFA challenges) for both the email client and the online collaboration portal, doubling the authentication burden. Single Sign-On (SSO) allows a user to authenticate once-satisfying the MFA requirement at that
Question
A Chief Information Security Officer (CISO) implemented MFA for all accounts in parallel with the BYOD policy. After the implementation, employees report the increased authentication method is causing increased time to tasks. This applies both to accessing the email client on the workstation and the online collaboration portal. Which of the following should be the CISO implement to address the employees' concerns?
Options
- ACreate an exception for the company's IPs.
- BImplement always-on VPN.
- CConfigure the use of employee PKI authentication for email.
- DAllow the use of SSO.
How the community answered
(24 responses)- A4% (1)
- B8% (2)
- C13% (3)
- D75% (18)
Explanation
The core problem is that users must authenticate separately (including MFA challenges) for both the email client and the online collaboration portal, doubling the authentication burden. Single Sign-On (SSO) allows a user to authenticate once-satisfying the MFA requirement at that single login event-and then access all integrated services without re-authenticating. This eliminates the redundant prompts while keeping MFA in place. Creating exceptions for company IPs (A) weakens the MFA control and does not help remote workers. Always-on VPN (B) routes traffic securely but does not reduce the number of authentication prompts. Configuring PKI for email (C) only addresses one of the two services and still leaves the collaboration portal unaffected.
Topics
Community Discussion
No community discussion yet for this question.