Why is MFA important for a TA, and what factors should be enabled?

• A. MFA is optional for most access and not essential.
• B. MFA reduces credential compromise; factors include something you know (password), something you have (token), and something you are; combine at least two for critical access.
• C. MFA uses only biometrics.
• D. MFA is only required for system administration.

Answer: (B)

Multi-factor authentication strengthens access security by requiring more than one form of verification, making a stolen password much less likely to grant entry. The core idea is to use at least two different kinds of factors: something you know (a password), something you have (a hardware token or a device that generates codes or can receive a push), and something you are (a biometric).

For a trusted agent, MFA is especially important because TA accounts often access sensitive tools, student data, or critical systems. Requiring two or more factors creates defense in depth: even if a password is compromised, an attacker would still need the second factor to gain access. This layered protection helps reduce credential compromise and protects the integrity of the testing process and the data involved.

In practice, you should enable at least two factors for critical access and choose methods that are resistant to phishing and credential theft, such as hardware tokens or authenticator apps. While biometrics can be part of MFA, relying on a single factor like biometrics or limiting MFA only to system administration misses the broader protection MFA provides across important accounts.