medium10 pts · first answer countsidentity-securityconditional-accessmfa

Protecting MFA registration itself

An attacker with a phished password signs in and registers their own authenticator before the real user does. Which Conditional Access setting best prevents this?

A.Require every user to change their password once a monthB.Create a named location that blocks all mobile phonesC.Turn off sign-in logging for MFA registration eventsD.Target 'Register security information' and require a trusted place

Discussion 0

Join free to post in the discussion.

Protecting MFA registration itself

Discussion 0

Related questions