Exam CAS-004 topic 1 question 451 discussion

Two-factor authentication (2FA) requires users to provide not only their password but also a second form of identification, like a code sent to their phone or a security key, to access systems. This significantly strengthens security against brute-force attacks, whaling, and spear-phishing attempts. Even if an attacker obtains a username and password, they still won't be able to access the system without the additional verification.