The compromise occurred despiteencryption and proper access rights, indicating that the attacker likely gained access through compromised credentials.MFAwould mitigate this by:
* Adding a Layer of Security:Even if credentials are stolen, the attacker would also need the second factor (e.g., OTP).
* Account Compromise Prevention:Prevents unauthorized access even if username and password are known.
* Insufficient Authentication:The absence of MFA often leaves systems vulnerable to credential-based attacks.
Other options analysis:
* A. Continual backups:Addresses data loss, not unauthorized access.
* C. Encryption in transit:Encryption was already implemented.
* D. Configured firewall:Helps with network security, not authentication.
CCOA Official Review Manual, 1st Edition References:
* Chapter 7: Access Management and Authentication:Discusses the critical role of MFA in preventing unauthorized access.
* Chapter 9: Identity and Access Control:Highlights how MFA reduces the risk of data exposure.