A malicious actor conducted a brute-force attack on a company's web servers and eventually gained access to the company's customer information database. Which of the following is the most effective way to prevent similar attacks?
The correct answer is:
C. Multifactor authentication
Explanation:
Multifactor authentication (MFA) is the most effective way to prevent brute-force attacks, as it requires users to provide multiple forms of verification before gaining access to sensitive systems. Even if an attacker is able to guess or crack a password through brute-force, they would still need the second factor (such as a code sent to a mobile device or a hardware token) to gain access. This greatly increases the security of accounts and systems by making unauthorized access much more difficult.
Multifactor authentication (MFA) requires users to provide multiple forms of verification (e.g., a password and a one-time code sent to a phone). Even if an attacker successfully guesses or cracks a password through brute-force techniques, they would still need to bypass the additional authentication factor, significantly reducing the likelihood of unauthorized access
C. Multifactor authentication
Brute-force attacks involve attempting many combinations of usernames and passwords to gain unauthorized access. Multifactor authentication (MFA) adds an additional layer of security by requiring a second form of authentication (e.g., a one-time password, biometric verification, or a hardware token) in addition to a password. Even if the attacker successfully brute-forces a password, MFA would prevent unauthorized access without the second factor.
A WAF can block some brute-force attempts by detecting unusual traffic patterns, but it is not foolproof. MFA is a more direct and effective solution for authentication protection.
A WAF monitors, filters, and blocks HTTP traffic to and from a web application, specifically identifying and mitigating malicious activities like brute-force attacks. WAFs can detect patterns of suspicious login attempts and block IP addresses or rate-limit traffic to prevent attackers from guessing credentials.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
jbmac
1 week, 5 days agoFourgehan
1 month, 1 week agosaba263
1 month, 2 weeks agoAriGarcia
1 month, 2 weeks agoDysthe
1 month, 3 weeks agoBevMe
1 month, 3 weeks agob82faaf
1 month, 3 weeks ago