Phishing awareness results: Team A: click rate 8%, report rate 6%, median report time 52 min Team B: click rate 7%, report rate 18%, median report time 14 min Team C: click rate 12%, report rate 21%, median report time 10 min Incident summary: Team C had one mailbox takeover after a user approved an MFA push while traveling.
Based on the exhibit, which control would most effectively reduce the remaining successful attacks?
Phishing awareness results: Team A: click rate 8%, report rate 6%, median report time 52 min Team B: click rate 7%, report rate 18%, median report time 14 min Team C: click rate 12%, report rate 21%, median report time 10 min
Incident summary: Team C had one mailbox takeover after a user approved an MFA push while traveling.
Answer choices
Good practice is not just finding the correct option. The wrong answers often show the exact trap the exam wants you to fall into.
Continue generic awareness posters without changing technical controls.
Posters alone will not stop approval-based MFA abuse or other prompt fatigue attacks.
Replace push-based MFA with phishing-resistant MFA and reinforce verification for unusual login prompts.
Phishing-resistant MFA blocks prompt abuse, and verification steps help users resist social engineering during abnormal sign-in events.
Disable MFA on mobile devices so users can log in faster.
Removing MFA would make account takeover much easier and would increase risk significantly.
Allow employees to approve prompts from any device to reduce help desk calls.
Loosening prompt approval would make MFA fatigue attacks easier to succeed, not harder.
Common exam trap
NAT is not only about the public address. The inside/outside interface roles and the ACL or rule that matches traffic are just as important.
Technical deep dive
NAT questions usually test address translation, overload/PAT behaviour, static mappings and whether the right traffic is being translated. Read the interface direction and address terms carefully.
Related practice questions
Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.
Practise SY0-701 questions linked to Security+ social engineering questions.
Practise SY0-701 questions linked to Security+ cryptography.
Practise SY0-701 questions linked to Security+ IAM questions.
Practise SY0-701 questions linked to Security+ risk management questions.
Practise SY0-701 questions linked to Security+ incident response questions.
Practise SY0-701 questions linked to Security+ malware questions.
Practise SY0-701 questions linked to Security+ vulnerability management questions.
Practise SY0-701 questions linked to Security+ security operations questions.
Practise SY0-701 questions linked to Security+ zero trust questions.
Practise SY0-701 questions linked to Security+ authentication factors questions.
Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.
Question 1
Question 2
Question 3
Question 4
Question 5
Question 6
FAQ
Static NAT maps one inside address to one outside address.
The correct answer is: Replace push-based MFA with phishing-resistant MFA and reinforce verification for unusual login prompts. — The metrics show training improvements, but the incident summary reveals the remaining weakness: approval-based MFA abuse. Phishing-resistant MFA, such as FIDO2 or certificate-based authentication, removes the attacker’s ability to trick a user into approving a login prompt. Reinforcing verification for unusual requests adds user behavior support, but the technical control is what closes the biggest gap. This is a strong example of combining awareness with a more resilient authentication method. Why others are wrong: Generic posters may improve awareness but do not stop prompt fatigue or token abuse. Disabling MFA would sharply increase account takeover risk and remove a major defense. Allowing approvals from any device would make social engineering easier because the user would have fewer safeguards and less context. The best answer must reduce the attack path that already succeeded, not just improve messaging or convenience.
Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.
Sign in to join the discussion.