nerdexam
Isaca

CRISC · Question #587

Which of the following BEST reduces the likelihood of fraudulent activity that occurs through use of a digital wallet?

The correct answer is A. Require multi-factor authentication (MFA) to access the digital wallet.. Requiring multi-factor authentication (MFA) to access a digital wallet significantly reduces the likelihood of fraudulent activity.

Submitted by jaden.t· Apr 18, 2026Risk Response and Reporting

Question

Which of the following BEST reduces the likelihood of fraudulent activity that occurs through use of a digital wallet?

Options

  • ARequire multi-factor authentication (MFA) to access the digital wallet.
  • BUse a digital key to encrypt the contents of the wallet.
  • CEnable audit logging on the digital wallet's device.
  • DRequire public key infrastructure (PKI) to authorize transactions.

How the community answered

(19 responses)
  • A
    74% (14)
  • B
    11% (2)
  • C
    5% (1)
  • D
    11% (2)

Why each option

Requiring multi-factor authentication (MFA) to access a digital wallet significantly reduces the likelihood of fraudulent activity.

ARequire multi-factor authentication (MFA) to access the digital wallet.Correct

Requiring multi-factor authentication (MFA) adds an essential layer of security by demanding two or more verification methods (e.g., something you know, something you have, or something you are). This significantly reduces the likelihood of fraudulent activity, even if a primary credential like a password is compromised, because the attacker would also need access to the second factor.

BUse a digital key to encrypt the contents of the wallet.

Using a digital key to encrypt contents protects the data at rest but does not inherently prevent an unauthorized user who gains access to the wallet from using it for fraudulent transactions if they can decrypt it or use the key.

CEnable audit logging on the digital wallet's device.

Enabling audit logging helps detect fraudulent activity after it occurs and aids in forensics, but it does not reduce the likelihood of the activity itself.

DRequire public key infrastructure (PKI) to authorize transactions.

Requiring PKI to authorize transactions is a strong authentication method, but MFA generally provides a broader and more common approach to securing access to the wallet application itself, which then enables transactions.

Concept tested: Multi-factor authentication

Source: https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-howitworks

Topics

#Fraud prevention#Multi-factor authentication (MFA)#Digital wallet security#Risk mitigation

Community Discussion

No community discussion yet for this question.

Full CRISC Practice