Which Salesforce security feature should the consultant recommend?

A nonprofit customer is concerned about its users having their Salesforce usernames and passwords compromised .

Which Salesforce security feature should the consultant recommend?
A . Set up two-factor authentication
B . Add IP ranges on user profiles
C . Specify a My Domain login policy for its Salesforce instance
D . Specify a Trusted IP Range for each user

Answer: A