An organization wants to implement an identity and access management technology that is resistant to phishing attacks. Which of the following is the best technology to implement?

The correct answer is C. Passwordless authentication. Passwordless authentication eliminates reliance on passwords, which are the most common target of phishing attacks. Authentication is instead based on more secure factors such as biometrics or hardware-bound cryptographic keys, making phishing attempts ineffective.

Submitted by minji_kr· Mar 6, 2026Security operations

Question

Options

AFederation
BPrivileged access management
CPasswordless authentication
DSingle sign-on

How the community answered

(64 responses)

A
2% (1)
B
3% (2)
C
94% (60)
D
2% (1)

Explanation

Passwordless authentication eliminates reliance on passwords, which are the most common target of phishing attacks. Authentication is instead based on more secure factors such as biometrics or hardware-bound cryptographic keys, making phishing attempts ineffective.

Topics

#passwordless authentication#phishing resistance#IAM#MFA

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice