Best Practices for Safeguarding Employee Credentials
Question
An organization receives an increasing number of phishing emails.
Which method should be used to protect employee credentials in this situation?
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B. C. D.D.
Phishing emails are a common method used by attackers to trick users into giving away sensitive information, such as login credentials. To protect employee credentials in this situation, the organization should implement multifactor authentication (MFA), which is the best option out of the given choices.
MFA is a security process that requires users to provide two or more forms of authentication before granting access to an account. The additional authentication factors can be something the user knows (such as a password), something the user has (such as a hardware token or mobile device), or something the user is (such as a fingerprint or facial recognition). This extra layer of security makes it much more difficult for attackers to gain access to an account even if they have obtained the user's password through phishing.
A strict password policy is also important to have in place, but it may not be sufficient on its own to protect against phishing attacks. Password policies typically require users to use complex passwords and change them regularly, but if a user falls victim to a phishing attack and enters their credentials on a fraudulent website, the password policy alone will not prevent the attacker from accessing the account.
Captcha on login pages is a good way to prevent automated attacks, but it will not protect against phishing attacks where the attacker is specifically targeting individual users and tricking them into entering their credentials on a fraudulent website.
Encrypted emails are important for protecting the confidentiality of email communications, but they do not address the problem of phishing attacks and protecting employee credentials.
In summary, the best method to protect employee credentials in the situation of increasing phishing emails is to implement multifactor authentication. This will add an extra layer of security that makes it much more difficult for attackers to gain access to accounts even if they have obtained a user's password through phishing.
