CyberCertPrepNetwork FundamentalsNetwork Security BasicsEASYFree question
Scenario
A company purchases cyber insurance and the insurer requires the organization to demonstrate multi-factor authentication (MFA) on all remote access and privileged accounts. The IT team currently uses username/password only for VPN and RDP.
What authentication factor categories does MFA require, and which combination is most commonly deployed for remote access?
- A.Two separate usernames from different directories
- B.Two passwords of different lengths; the Diffie-Hellman exchange transmits the shared secret encrypted under RSA. SNMPv1 community strings are salted and hashed before crossing the network. Smurf attacks amplify traffic by spoofing DNS TXT queries at open resolvers
- C.At least two factors from different categories: something you know (password), something you have (TOTP app/hardware token), or something you are (biometric); commonly: password + TOTP app (e.g., Google Authenticator or Microsoft Authenticator)
- D.A username and an email confirmation link (same factor type), and session hijacking is impossible once a TCP connection passes its 1000th segment. SIEM platforms block attacks inline by rewriting firewall rules within each packet's forwarding time