CompTIA Project+ PK0-005 Practice Question

Requiring users to log in using a password and a security code sent to their mobile device implements multifactor authentication (MFA). MFA adds an extra layer of security by combining something the user knows (password) with something the user has (mobile device). This significantly reduces the risk of unauthorized access. While installing VPN software improves the security of the connection, it does not enhance authentication methods. Allowing login with just a username and password does not provide additional security beyond standard practice. Having users change passwords every 30 days may lead to weaker passwords due to frequent changes and does not provide as strong a security enhancement as MFA.