ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

Single-factor authentication depends on just one type of credential-in this case, a password that the user knows. If that password is guessed, phished, reused from another site, or discovered through brute-force or password-spraying attacks, an attacker can gain full access. MFA significantly reduces this risk by adding a second factor an attacker is unlikely to possess. TLS downgrade attacks target protocol negotiation and are unrelated to how many authentication factors are required. Insider misuse involves authorization controls after authentication and is not specifically caused by single-factor logins. Denial-of-service attacks aim to exhaust resources, not to bypass authentication, so they are not a primary risk introduced by password-only sign-in.