What is Multi-Factor Authentication (MFA) and why is it recommended in Annex F guidelines?

• A. Multi-Factor Authentication uses two or more verification factors; increases assurance beyond passwords.
• B. Single-Factor Authentication.
• C. MFA replaces encryption.
• D. MFA is not recommended.

Answer: (A)

Using two or more verification factors to prove identity is the core idea. Multi-Factor Authentication requires at least two independent checks, typically something you know (a password), something you have (a token or phone), and something you are (a biometric). This setup makes unauthorized access much harder because even if a password is stolen, the attacker would still need the second factor to complete authentication. Annex F guidelines advocate MFA because it strengthens access controls, reduces the risk of credential theft, and adds defense in depth for protecting systems and data. It complements other protections like encryption and should not be viewed as unnecessary or unsuitable.