A security architect is designing MFA for a high-security environment. The requirement is to resist phishing and man-in-the-middle attacks. Which MFA method is most effective against these threats?

FIDO2 WebAuthn with a hardware security key

One-time password (OTP) sent via SMS

Push notification to a mobile app

During the login process, after a user provides a username, what does authentication specifically accomplish?

It records the user's login time

It creates a unique identity for the user

It determines the user's access rights

It verifies that the user is who they claim to be

A company is implementing MFA for remote access. They want to use a combination that is resistant to man-in-the-middle attacks. Which combination should they choose?

Hardware security key and fingerprint

EC-CouncilCertified Cybersecurity Technician

Domain 2Objective 1

Identification, Authentication, and Authorization CCT Practice Questions (Page 10)

Part of the Identity and Network Security Controls domain, which makes up ~20% of our current practice bank.

48questions here

10free pages

8concepts

Questions 46–48

46expert · hard
A security architect is designing MFA for a high-security environment. The requirement is to resist phishing and man-in-the-middle attacks. Which MFA method is most effective against these threats?
Select an answer first
47foundation · easy
During the login process, after a user provides a username, what does authentication specifically accomplish?
Select an answer first
48expert · medium
A company is implementing MFA for remote access. They want to use a combination that is resistant to man-in-the-middle attacks. Which combination should they choose?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CCT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCT” is a trademark of its owner, used for identification only.

Identification, Authentication, and Authorization CCT Practice Questions (Page 10)

Questions 46–48

A security architect is designing MFA for a high-security environment. The requirement is to resist phishing and man-in-the-middle attacks. Which MFA method is most effective against these threats?

During the login process, after a user provides a username, what does authentication specifically accomplish?

A company is implementing MFA for remote access. They want to use a combination that is resistant to man-in-the-middle attacks. Which combination should they choose?

Keep studying — Identity and Network Security Controls