Which Salesforce security feature should the consultant recommend?

A nonprofit customer is concerned about its users having their Salesforce usernames and passwords compromised.

Which Salesforce security feature should the consultant recommend?
A . Set up two-factor authentication
B. Add IP ranges on user profiles
C. Specify a My Domain login policy for its Salesforce instance
D. Specify a Trusted IP Range for each user

Answer: A