Question
An administrator notices that several users are logging in from suspicious IP addresses. After speaking with the users, the administrator determines that the employees were not logging in from those IP addresses and resets the affected users’ passwords. Which of the following should the administrator implement to prevent this type of attack from succeeding in the future?
- A. Multifactor authentication Correct
- B. Permissions assignment
- C. Access management
- D. Password complexity
Explanation
Multifactor authentication stops this attack because a stolen or guessed password alone is no longer enough to sign in; the attacker would also need the second factor. Resetting passwords only fixes the current compromise. Password complexity makes guessing harder but does not help once a password is phished or reused, and permissions assignment and access management control what an account can do after sign-in, not whether the attacker can sign in.
