Remote vendors dial into city systems using only longer passwords. Which control selection most effectively reduces remote-access risk?
Select an answer to reveal the explanation.
Short Explanation
A longer password is a taller fence with the same unlocked side gate. Pair device/posture checks (NAC) with MFA and you’ve got locks that actually change the remote-access risk story. Posters and quieter logs don’t.
Full Explanation
Effective control selection matches controls to the stated risk. Remote access protected only by password length remains vulnerable to credential theft and reuse; combining Network Access Control (NAC) with multi-factor authentication substantially strengthens authentication and device posture requirements. Cosmetic length bumps or awareness posters alone are weak against remote compromise. Disabling VPN logging reduces detection capability.