A consultant is performing a social engineering attack against a client. The consultant was able to collect a number of usernames and passwords using a phishing campaign. The consultant is given credentials to log on to various employees email accounts. Given the findings, which of the following should the consultant recommend be implemented?
A) Strong password policy
B) Password encryption
C) Email system hardening
D) Two-factor authentication

Question

Quizplus · Accepted Answer

Two-factor authentication adds an additional layer of security, making it more difficult for attackers to gain access to accounts even if they have the correct username and password.

A Consultant Is Performing a Social Engineering Attack Against a Client