CyberCertPrepSecurity FundamentalsWeb Security BasicsEASYFree question
What is multi-factor authentication (MFA) in the context of web security?
- A.Using multiple passwords for a single account
- B.Requiring two or more different types of verification to prove identity
- C.Logging in from multiple devices simultaneously; security headers take effect only when the site runs on port 8080
- D.Using multiple browsers to access the same website; a captcha provides authentication as well as bot mitigation
Why B is correct
MFA requires users to provide two or more verification factors from different categories: something you know (password), something you have (phone/token), or something you are (fingerprint/face). Even if an attacker steals a password, they cannot access the account without the additional factor.
Know someone studying for Security Fundamentals? Send them this one.