ISC2 CISSP Practice Question

Multi-factor authentication (MFA) requires each participant to prove identity with at least two independent factors (for example, a password plus a one-time code on a registered device, and possibly biometrics). Requiring MFA for meeting entry or account sign-in means that even if an attacker obtains the meeting link or a legitimate user's password, they still cannot satisfy the second factor, effectively blocking unauthorized entry.

Passwords alone offer minimal assurance because they can be forwarded or embedded in invitation links. Transport-layer encryption protects data in transit but does not validate who is on the call. Waiting rooms let hosts screen participants, yet success depends on manual vigilance and can be defeated by impersonation. Systematic MFA therefore provides the strongest, least error-prone barrier against unintended participants.