Identity and access management · Question 12 of 12
An attacker calls the help desk, poses as an employee who lost a smartphone and asks for MFA to be reset. Which measures prevent the misuse?
2 answers are correct. Hard
Show answer
Answer
- B Verify identity via a second, independent channel
- D Call back on the registered number or get a manager's confirmation
Explanation
MFA resets are a favorite target of social engineering. Strong identity verification at the help desk, such as video matching, call-back or confirmation by a third party, is just as important as the factor itself.