A company manages sensitive customer data and currently uses username and passphrase authentication. They want to mitigate the risk of employee credential compromise. What should they do?

IT Exam Items RepositoryCategory: Cybersecurity EssentialsA company manages sensitive customer data and currently uses username and passphrase authentication. They want to mitigate the risk of employee credential compromise. What should they do?

A company manages sensitive customer data and currently uses username and passphrase authentication. They want to mitigate the risk of employee credential compromise. What should they do?

  • Purchase an insurance policy
  • Enhance data encryption with an advanced algorithm
  • Implement multi-factor authentication
  • Install fingerprint or retinal scanners

Explanation: Risk management is the identification, evaluation, and prioritization of risks. Organizations manage risk in one of four ways, avoidance, mitigation, transfer, or accept. In this scenario, implementing multi-factor authentication can reduce the risk of employee credential compromise, which is a mitigation action. Installing fingerprint or retinal scanners eliminates the risk, which is avoidance. Purchasing an insurance policy is transferring the financial risk to the insurance company.

Related exam: Cybersecurity Essentials v3.0 Course Final Exam Answers