Multiple choice technology security

Administrative pages for websites should be protected by

  1. A mechanism that requires only a password

  2. Basic authentication

  3. 2/3 factor authentication

  4. A mechanism with no lock-out, to prevent accidentally denying legitimate access
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Administrative pages are high-value targets for attackers and require stronger authentication than standard username/password. Basic auth and single-factor passwords are vulnerable to compromise. Multi-factor authentication (2/3 factors) provides defense-in-depth by requiring something you know plus something you have or are. No lockout would actually increase vulnerability.

Keep practicing — related questions