CRISC: Certified in Risk and Information Systems Control

By Isaca · Question Mode

QuestionQ2

VerifiedRisk Response and Reporting

Which of the following is the BEST control for mitigating risk when a critical customer-facing application has been vulnerable to recent credential-stuffing attacks?

Explanation

Multi-factor authentication requires an additional verification factor beyond a username and password, preventing successful account access with stolen credential pairs alone. It directly mitigates credential-stuffing attacks.

Community Discussion

No comments yet. Be the first to start the discussion!