Which of the following would be the BEST control for the company to require from prospective vendors?

A global company is experiencing unauthorized logging due to credential theft and account lockouts caused by brute-force attacks. The company is considering implementing a third-party identity provider to help mitigate these attacks.

Which of the following would be the BEST control for the company to require from prospective vendors?
A . IP restrictions
B . Multifactor authentication
C . A banned password list
D . A complex password policy

View Answer

Answer: B

Explanation:

Multifactor authentication (MFA) would be the best control to require from a third-party identity provider to help mitigate attacks such as credential theft and brute-force attacks.

Reference: CompTIA Security+ Study Guide, Exam SY0-601, Chapter 2