medium10 pts · first answer countsidentity-securitymfa

Stopping MFA fatigue attacks

An attacker with a user's password sends dozens of MFA push prompts at 2 am until the user taps Approve. Which control best reduces this risk?

A.Increase the password length requirementB.Turn on number matching or move to phishing-resistant FIDO2 / passkeysC.Send MFA prompts by email insteadD.Allow users to approve prompts without unlocking their phone

Discussion 0

Join free to post in the discussion.

Stopping MFA fatigue attacks

Discussion 0

Related questions