Question 1
Which attack mitigation must be in place to prevent an attacker from authenticating to a service using a brute force attack?
- AOption A:
Forced password change every 6 months
- BOption B:Use of a 100 ms delay between each authentication
- COption C:Use of a password manager
- DOption D:
Use of multifactor authentication for all accounts
Show answer and explanation
Correct answer: D
Multifactor Authentication (MFA) is one of the most effective mitigations against brute-force attacks. Even if an attacker guesses or steals a user’s password, they would still need a second authentication factor (e.g., push notification, hardware token, biometric verification) to complete login.