Require an additional factor before entering the cloud console, even if an administrator password is leaked.
Which countermeasure is appropriate?
MFA adds another factor such as an OTP or security key to the password and lowers the risk of account takeover.
Detailed explanation
Incorrect. Sharing an administrator password destroys accountability and increases the breach scope.
Incorrect. A console background color does not affect authentication strength.
Correct. MFA requires a second factor in addition to the password.
Incorrect. Deleting audit logs makes investigation harder.
Try it yourself
An example you can run in a temporary verification environment.
printf '%s\n' 'password plus one-time code or security key'Expected result
password plus one-time code or security keyKey points
- MFA
- OTP
- Administrator account
Notes
- Environment: 認証強化の概念確認
- Command output formatting can vary slightly by distribution or tool version.
- Run the example in a temporary directory or process when possible.
Foundation review
Factors
Combine different factor types such as knowledge, possession, and biometrics.
Recovery
Provide a safe recovery process for a lost MFA device without weakening the account controls.