Which control provides verification of user identity during sign-in?

• A. Data loss prevention
• B. Log management
• C. Multi-factor authentication
• D. Email filtering

Answer: (C)

Authentication is the process of verifying a user’s identity during sign-in. Multi-factor authentication strengthens this process by requiring more than one verification factor before access is granted. By combining something you know (like a password), something you have (a hardware token or authenticator app), and/or something you are (a biometric). this approach makes it much harder for an attacker to gain entry, even if one factor is compromised.

Other controls shown serve different security goals: preventing data leakage (data loss prevention), collecting and analyzing logs to detect issues (log management), and filtering email for threats (email filtering). None of these directly verify identity at sign-in.