Which of the following management actions will MOST likely change the likelihood rating of a risk scenario related to remote network access?

Creating metrics helps to monitor and identify trends in remote connections but does not proactively reduce the likelihood of a security incident occurring.

Updating the organizational policy sets guidelines and requirements but does not inherently implement the technical controls that directly reduce the likelihood of an attack.

Updating remote desktop software primarily addresses known vulnerabilities within the software, which can reduce likelihood, but MFA directly strengthens the user authentication process regardless of software vulnerabilities, providing a more comprehensive likelihood reduction for access.

Implementing multi-factor authentication (MFA) drastically increases the difficulty for an unauthorized party to gain access to remote networks, even if one authentication factor (like a password) is compromised. By requiring multiple forms of verification, MFA directly reduces the likelihood of a successful breach via remote network access by significantly raising the bar for unauthorized entry.