Which of the following MOST effectively prevents unauthorized parties from logging into a remote access solution by using stolen credentials?

The correct answer is C. Use of machine-based authentication as an additional factor. Machine-based authentication as a second factor (e.g., a certificate tied to a specific corporate device) means that stolen username/password credentials alone are insufficient to gain access - the attacker would also need the specific registered machine. This directly…

Privacy Architecture

Question

Options

AImplementation of geo-blocking for high-risk countries
BUse of complex password policies
CUse of machine-based authentication as an additional factor
DHardening of the remote access solution gateway

How the community answered

(47 responses)

A
2% (1)
B
11% (5)
C
81% (38)
D
6% (3)

Explanation

Machine-based authentication as a second factor (e.g., a certificate tied to a specific corporate device) means that stolen username/password credentials alone are insufficient to gain access - the attacker would also need the specific registered machine. This directly neutralizes the stolen-credential threat. Geo-blocking (A) is easily bypassed via VPNs. Complex passwords (B) are irrelevant once credentials are stolen. Gateway hardening (D) reduces the attack surface but does not prevent credential replay.

Topics

#Multi-Factor Authentication (MFA)#Access Control#Remote Access Security#Authentication

Community Discussion

No community discussion yet for this question.

Full CDPSE Practice