What is multi-factor authentication (MFA) and why does the Protect function emphasize it?

• A.A password reset process requiring a help desk ticket, a manager's verbal approval (recorded informally), a follow-up email confirmation logged in the ticketing system
• B.A single sign-on session persisting across devices, refreshed automatically, logged for the identity team (per device type used)
• C.A shared token issued to a department, not an individual, tracked informally in a spreadsheet (updated periodically by the help desk)
• D.Authentication requiring two or more factors (something you know, have, or are), significantly reducing the risk of unauthorized access even when one factor is compromised