An organization is replacing its internal human resources system with a SaaS-based application. The solution is multi-tenant, and the organization wants to ensure ubiquitous access while preventing…

Implementing 'destination resources authentication' is a vague term that does not specify a particular technology or method to prevent replay attacks.

Requiring and implementing two-factor authentication (2FA) significantly mitigates password replay attacks because even if an attacker intercepts a password, they would also need the second factor (e.g., a one-time code from a mobile app or a hardware token) to gain access. This makes stolen credentials useless for replay attacks.

Removing administrator privileges from users' laptops is good security hygiene for endpoint protection but does not directly prevent password replay attacks against a SaaS application.

Combining network authentication and physical security in one card/token does not inherently prevent replay attacks against a SaaS application unless specifically integrated into a robust multi-factor authentication scheme for that application.