Implementing Multi-Factor Authentication

Quiz covering Managing Security Controls for Identity

Questions in this quiz

A preview of the 5 questions covered. Start the quiz above to answer them, check your score, and read the explanations.

1. 1

   Which of the following scenarios describes a valid Multi-Factor Authentication (MFA) process using two distinct authentication factors?

2. 2

   An organization wants to implement a policy where MFA is only required if a user is logging in from an untrusted IP address or a non-corporate device. What is this security control called?

3. 3

   To combat 'MFA Fatigue' attacks, where an attacker repeatedly sends push notifications to a user's phone until they accidentally approve one, which feature should be enabled?

4. 4

   Which MFA method is considered the most resistant to sophisticated phishing and Man-in-the-Middle (MitM) attacks?

5. 5

   A company is designing its identity strategy and needs to ensure that administrators can still access the environment if the primary MFA service provider goes offline. What is the best practice for this scenario?