What is multi-factor authentication (MFA) in the context of web security?
- A.Using multiple passwords for a single account
- B.Logging in from multiple devices simultaneously
- C.Requiring two or more different types of verification to prove identity
- D.Using multiple browsers to access the same website
Why C is correct
MFA requires users to provide two or more verification factors from different categories: something you know (password), something you have (phone/token), or something you are (fingerprint/face). Even if an attacker steals a password, they cannot access the account without the additional factor.
Know someone studying for Security Fundamentals? Send them this one.