An organization receives an increasing number of phishing emails. Which method should be used to protect employee credentials in this situation?

The correct answer is A. Multifactor Authentication. Phishing attacks are designed to steal credentials by tricking users into entering them on fake sites. Multifactor Authentication (MFA) is the most effective countermeasure because even if a password is successfully stolen, the attacker still cannot log in without the second…

Submitted by yousef_jo· Apr 18, 2026Configuring access within a cloud solution environment

Question

An organization receives an increasing number of phishing emails. Which method should be used to protect employee credentials in this situation?

Options

AMultifactor Authentication
BA strict password policy
CCaptcha on login pages
DEncrypted emails

How the community answered

(19 responses)

A
79% (15)
B
5% (1)
C
11% (2)
D
5% (1)

Explanation

Phishing attacks are designed to steal credentials by tricking users into entering them on fake sites. Multifactor Authentication (MFA) is the most effective countermeasure because even if a password is successfully stolen, the attacker still cannot log in without the second factor (e.g., a hardware token, OTP, or push notification). A strict password policy (B) only ensures strong passwords but doesn't prevent them from being entered into a phishing site. CAPTCHA (C) defends against automated bots, not social engineering. Encrypted emails (D) protect email content in transit but don't prevent users from following phishing links or submitting credentials.

Topics

#Multifactor Authentication#Phishing Protection#Credential Security#Identity and Access Management

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice