Which action should an administrator take after identifying privileged accounts without MFA using the CrowdStrike Identity Analyzer?

Question

Options

• AApply conditional access policies to enforce MFA for the accounts.
• BManually change the passwords of all identified accounts.
• CRevoke all privileges from the affected accounts immediately.
• DDisable the accounts permanently to prevent unauthorized access.

• A
  83% (43)
• B
  4% (2)
• C
  4% (2)
• D
  10% (5)

Explanation

Option A: Enforcing MFA through conditional access policies ensures that privileged accounts remain secure without disrupting legitimate operations. This approach addresses the identified risk directly and aligns with best practices. Option B: Changing passwords can enhance security but does not address the lack of MFA, leaving the accounts still vulnerable to unauthorized access. This action alone is not Option C: While revoking privileges could mitigate risks, it is often too disruptive and impractical for operational accounts or critical users. Instead, enforcing MFA is a more balanced and effective solution. Option D: Permanent account disabling is unnecessary and counterproductive unless there is clear evidence of a security breach. This approach does not address the root cause of missing

No community discussion yet for this question.