Require an additional factor before entering the cloud console, even if an administrator password is leaked.
Which countermeasure is appropriate?
MFA adds another factor such as an OTP or security key to the password and lowers the risk of account takeover.
Detailed explanation
Incorrect. Sharing an administrator password destroys accountability and increases the breach scope.
Incorrect. Sharing an administrator password destroys accountability and increases the breach scope.
Incorrect. A console background color does not affect authentication strength.
Incorrect. A console background color does not affect authentication strength.
Correct. MFA requires a second factor in addition to the password.
Correct. MFA requires a second factor in addition to the password.
Incorrect. Deleting audit logs makes investigation harder.
Incorrect. Deleting audit logs makes investigation harder.
Try it yourself
An example you can run in a temporary verification environment.
printf '%s\n' 'password plus one-time code or security key'Expected result
password plus one-time code or security keyKey points
- MFA
- OTP
- Administrator account
Notes
- Environment: 認証強化の概念確認
- Command output formatting can vary slightly by distribution or tool version.
- Run the example in a temporary directory or process when possible.
Foundation review
Read the scope first
Check whether the command acts on the current shell, a new process, an existing process, or a file.
Verify the observable result
Use the supplied command and compare the output with the expected result.