Implementing Multi-Factor Authentication

What you'll be asked

1. Which of the following scenarios describes a valid Multi-Factor Authentication (MFA) process using two distinct authentication factors?
2. An organization wants to implement a policy where MFA is only required if a user is logging in from an untrusted IP address or a non-corporate device. What is this security control called?
3. To combat 'MFA Fatigue' attacks, where an attacker repeatedly sends push notifications to a user's phone until they accidentally approve one, which feature should be enabled?
4. Which MFA method is considered the most resistant to sophisticated phishing and Man-in-the-Middle (MitM) attacks?
5. A company is designing its identity strategy and needs to ensure that administrators can still access the environment if the primary MFA service provider goes offline. What is the best practice for this scenario?

Answers and explanations come after you submit.