Which of the following is the MOST effective way to mitigate against credential stuffing attacks within organizations utilizing cloud-based applications?

Question

Options

• AEmploy cloud access security brokers (CASBs) to extend security policies to cloud applications.
• BEducate users on the dangers of password reuse and the importance of credential hygiene.
• CMandate complex password policies and regular password changes.
• DImplement multi-factor authentication (MFA) across all user accounts.

• A
  4% (1)
• B
  18% (5)
• C
  11% (3)
• D
  68% (19)

Explanation

Credential stuffing exploits valid stolen username/password pairs from data breaches to gain unauthorized access. MFA is the most effective mitigation because even if attackers possess correct credentials, they cannot authenticate without the second factor. CASBs (A) extend visibility and policy enforcement but do not directly block credential stuffing. User education on password hygiene (B) reduces risk but cannot prevent stuffing when breaches at other organizations expose credentials. Complex password policies and forced changes (C) reduce reuse partially but are far less reliable than MFA, which renders stolen credentials useless.

No community discussion yet for this question.