Two-factor authentication can be defeated if ________.
A) the user's computer is compromised
B) the attacker uses a man-in-the-middle attack
C) Both A and B
D) Neither A nor B

Question

Quizplus · Accepted Answer

Two-factor authentication can be defeated if the user's computer is compromised or the attacker uses a man-in-the-middle attack. If the computer is compromised, then the attacker can access the token generator or the SMS code sent to the phone. In a man-in-the-middle attack, the attacker intercepts the communication between the user and the service, mimicking the service to obtain the user's credentials. Thus, both A and B are correct.

Two-Factor Authentication Can Be Defeated If ________