Which authentication hardening method should a Cloud Practitioner recommend first when asked how to strengthen IAM user console logins that already use passwords?
Select an answer to reveal the explanation.
Short Explanation
When the question is how to harden a password-based console login, MFA is the classic answer — second factor, much harder to phish. Keep the password, add the authenticator, sleep better.
Full Explanation
Among foundational authentication methods (passwords, MFA, federation/Identity Center, roles), MFA is the direct hardening control for password-based console sign-in. It does not replace least-privilege policies but significantly reduces risk from stolen passwords.