管理者は、複数のユーザーが疑わしい IP アドレスからログインしていることに気付きました。ユーザーと話し合った後、管理者は従業員がそれらの IP アドレスからログインしていないことを確認し、影響を受けたユーザーのパスワードをリセットしました。管理者は、この種の攻撃が今後成功しないようにするために、次のどれを実施する必要がありますか?
正解:A
The correct answer is A because multifactor authentication (MFA) is a method of verifying a user's identity by requiring more than one factor, such as something the user knows (e.g., password), something the user has (e.g., token), or something the user is (e.g., biometric). MFA can prevent unauthorized access even if the user's password is compromised, as the attacker would need to provide another factor to log in. The other options are incorrect because they do not address the root cause of the attack, which is weak authentication. Permissions assignment (B) is the process of granting or denying access to resources based on the user's role or identity.
Access management is the process of controlling who can access what and under what conditions. Password complexity (D) is the requirement of using strong passwords that are hard to guess or crack, but it does not prevent an attacker from using a stolen password.