CCOA: Certified Cybersecurity Operations Analyst

By Isaca · Question Mode

QuestionQ13

VerifiedCybersecurity Principles and Risks

After an organization migrated its financial system to a cloud-hosted solution that supports single sign-on (SSO) for authentication, data was compromised by an individual on the local network using a compromised username and password. Which authentication control would have MOST effectively prevented this incident?

Explanation

Multi-factor authentication requires a user to provide an additional independent authentication factor beyond a username and password. Compromised credentials alone therefore would not be sufficient to access the cloud-hosted financial system through SSO.

Community Discussion

No comments yet. Be the first to start the discussion!