Which two security risks can be mitigated by enabling Two-Factor Authentication (2FA) in Salesforce? Choose 2 answers

Which two security risks can be mitigated by enabling Two-Factor Authentication (2FA) in Salesforce? Choose 2 answers
A . Users leaving laptops unattended and not logging out of Salesforce.
B . Users accessing Salesforce from a public Wi-Fi access point.
C . Users choosing passwords that are the same as their Facebook password.
D . Users creating simple-to-guess password reset questions.

Answer: B,C