A security administrator is troubleshooting MFA adoption. Users are complaining about frequent MFA prompts, and some are using SMS despite the organization's preference for TOTP. What is the best way to address both user friction and security?

Disable MFA for users who complain

Increase the frequency of MFA prompts

Implement conditional access policies to reduce prompts for trusted devices and block SMS as an MFA method

Allow SMS as an alternative method

A cloud administrator is setting up MFA for a user who will access the cloud console. The user has a smartphone. Which combination of factors represents a strong MFA setup?

Password and a TOTP code from an authenticator app

Smart card and a USB security key

Password and a security question

Fingerprint scan and facial recognition

A security team is evaluating MFA methods for a high-security environment. They are concerned about SIM-swapping attacks and want to avoid methods that rely on phone numbers. Which MFA method should they choose?

TOTP codes from an authenticator app

EC-CouncilCloud Security Essentials

Domain 2Objective 4

Multifactor Authentication and Least Privilege CSE Practice Questions (Page 2)

Part of the Identity and Access Management in the Cloud domain, which makes up ~12% of our current practice bank.

50questions here

10free pages

8concepts

Questions 6–10

6expert · medium
A security administrator is troubleshooting MFA adoption. Users are complaining about frequent MFA prompts, and some are using SMS despite the organization's preference for TOTP. What is the best way to address both user friction and security?
Select an answer first
7application · medium
A cloud administrator is setting up MFA for a user who will access the cloud console. The user has a smartphone. Which combination of factors represents a strong MFA setup?
Select an answer first
8application · medium
A security architect is designing access for a cloud environment. They want to ensure that even if a user's password is compromised, an attacker cannot access sensitive data. Additionally, they want to limit the data a legitimate user can access to only what is necessary for their role. Which combination of controls should they implement?
Select an answer first
9foundation · easy
Which of the following is an example of an inherence factor?
Select an answer first
10application · medium
A security team is evaluating MFA methods for a high-security environment. They are concerned about SIM-swapping attacks and want to avoid methods that rely on phone numbers. Which MFA method should they choose?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSE” is a trademark of its owner, used for identification only.

Multifactor Authentication and Least Privilege CSE Practice Questions (Page 2)

Questions 6–10

A security administrator is troubleshooting MFA adoption. Users are complaining about frequent MFA prompts, and some are using SMS despite the organization's preference for TOTP. What is the best way to address both user friction and security?

A cloud administrator is setting up MFA for a user who will access the cloud console. The user has a smartphone. Which combination of factors represents a strong MFA setup?

Which of the following is an example of an inherence factor?

A security team is evaluating MFA methods for a high-security environment. They are concerned about SIM-swapping attacks and want to avoid methods that rely on phone numbers. Which MFA method should they choose?

Keep studying — Identity and Access Management in the Cloud