Industry regulations require multifactor authentication to be used for sensitive server systems. Currently, users authenticate to these systems with a username and password. What should be done to ensure regulatory compliance?

Question $8$Answer

a$.$

Nothing; multifactor authentication is already in use.

b$.$

Configure a PIN requirement in addition to current authentication settings.

c$.$

Use PKI certificates to secure authentication further.

d$.$

Enforce periodic password changes.