MFA stands for multi-factor authentication, which is a method of verifying a user's identity using two or more factors, such as something you know (e.g., password), something you have (e.g., token), or something you are (e.g., biometrics). MFA can prevent someone from using the exfiltrated credentials, as they would need to provide another factor besides the username and password to access the system or application. MFA can also alert the legitimate user of an unauthorized login attempt, allowing them to change their credentials or report the incident. References:
* https://www.comptia.org/certifications/security
* https://www.youtube.com/watch?v=yCJyPPvM-xg
* https://www.professormesser.com/security-plus/sy0-601/sy0-601-video/multi-factor-authentication-5/