Multiple choice technology security

Administrative pages for websites should be protected by

  1. A mechanism that requires only a password

  2. Basic authentication

  3. 2/3 factor authentication

  4. A mechanism with no lock-out, to prevent accidentally denying legitimate access

Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Administrative pages are high-value targets and require strong authentication. Multi-factor authentication (2FA or 3FA) is the best practice because it requires something you know (password) plus something you have (token) or something you are (biometric). Options A and B offer only single-factor protection which is insufficient for admin access. Option D (no lockout) is dangerous as it prevents protection against brute force attacks.