Using CrowdStrike CIEM/Identity Analyzer, which of the following indicates an account that uses MFA?

Question

Options

• AAn account with no configured security policy for additional authentication factors.
• BAn account that uses only an SSH key pair for authentication.
• CAn account that prompts users to enter a code sent to their email in addition to their password.
• DAn account that requires a username and password to log in.

• A
  5% (2)
• B
  9% (4)
• C
  84% (36)
• D
  2% (1)

Explanation

Option A: Accounts without an additional authentication factor clearly do not use MFA. This scenario indicates a lack of proper security policies. Option B: SSH key pairs are a single-factor authentication mechanism based on "something you have." While secure, this does not qualify as MFA unless combined with an additional factor, such as a password or OTP. Option C: Multi-Factor Authentication (MFA) requires at least two forms of authentication, typically combining something the user knows (password) and something they have (email code, authenticator app). This example clearly demonstrates the use of MFA by requiring an additional code after password entry. Option D: A username and password alone constitute single-factor authentication. While secure passwords are important, they do not meet the criteria for MFA.

No community discussion yet for this question.