Your organization has identified several accounts that do not have Multi-Factor Authentication (MFA) enabled, using CrowdStrike's CIEM. Which of the…

Option A: Restricting permissions to "read-only" does not address the core issue of MFA enforcement.

These accounts remain vulnerable to unauthorized access, especially if they are compromised.

Option B: Monitoring unusual activity is a reactive measure and does not mitigate the risk posed by non-

MFA accounts. Proactively enforcing MFA policies is a better strategy for reducing exposure.

Option C: Using CIEM to enforce MFA policies ensures a consistent and automated approach to

improving account security. This method reduces the likelihood of human error and applies a scalable

solution to protect all accounts, aligning with best practices for cloud identity management.

Option D: While disabling non-MFA accounts might reduce risk temporarily, it can disrupt business

operations. A more measured approach, such as enforcing MFA, is preferable to balance security and

functionality.