An organization's financial data was compromised and posted online.

The compromise occurred despiteencryption and proper access rights, indicating that the attacker likelygained access through compromised credentials.MFAwould mitigate this by:

Adding a Layer of Security:Even if credentials are stolen, the attacker would also need the second factor (e.g., OTP).

Account Compromise Prevention:Prevents unauthorized access even if username and password are known.

Insufficient Authentication:The absence of MFA often leaves systems vulnerable to credential-based attacks.

Other options analysis:

A. Continual backups:Addresses data loss, not unauthorized access.

C. Encryption in transit:Encryption was already implemented.

D. Configured firewall:Helps with network security, not authentication.

CCOA Official Review Manual, 1st Edition References:

Chapter 7: Access Management and Authentication:Discusses the critical role of MFA in preventing unauthorized access.

Chapter 9: Identity and Access Control:Highlights how MFA reduces the risk of data exposure.