A banking website requires both a password and a one-time code from an authenticator app to log in. What security mechanism is this?
- A.A. Single sign-on
- B.C. CAPTCHA
- C.B. Multi-factor authentication (MFA)
- D.D. OAuth
Why C is correct
MFA requires two or more authentication factors from different categories: password (something you know) and authenticator code (something you have). This significantly reduces the risk of compromised credentials - even if the password is stolen, the attacker cannot log in without the second factor.
Know someone studying for Security Fundamentals? Send them this one.