Which statement is true about Two-Factor Authentication?

A user's Two-Factor Authentication (2FA) settings are unique to each NetSuite account they can access. An account is a distinct combination of a user's email and a company's Account ID. Therefore, if a user has credentials for multiple NetSuite accounts (e.g., a production account and a sandbox account, or accounts for different companies), they are required to complete the 2FA setup process for each one separately. The authenticator application will consequently display a separate entry for each configured NetSuite account.

A: The primary 2FA method uses a code from an authenticator app, not email. Also, trusted devices can bypass the need for a code on every login. B: Administrators can set the trusted device duration to various periods (e.g., 24 hours, 7 days, 30 days), not only "Per Session." C: 2FA is mandatory for the Administrator role and other roles with specific high-level permissions, but not automatically for all roles like Sales Administrator. ---

1. NetSuite Help Center, SuiteAnswers (ID: 99288). "Two-Factor Authentication (2FA) FAQ."

Supporting Answer D: The FAQ section "Do I need to set up 2FA for each of my NetSuite accounts?" explicitly states: "Yes. If you have access to multiple NetSuite accounts, you must set up 2FA for each account separately."

Supporting Rejection of B: The FAQ section "How long can I trust my device for 2FA?" details the available settings: "The default duration is 30 days. Your administrator can change the duration to 24 hours, 7 days, or per session."

2. NetSuite Help Center, SuiteAnswers (ID: 72221). "Mandatory Two-Factor Authentication (2FA) for Highly Privileged Roles."

Supporting Rejection of C: This document lists the specific permissions that make a role "highly privileged" and require 2FA, such as "Access Unencrypted Credit Cards" and "Two-Factor Authentication Base." It clarifies that the requirement applies to the Administrator role by default, but not necessarily to other standard roles like Sales Administrator unless they are customized with these specific permissions.

3. NetSuite Help Center, SuiteAnswers (ID: 49212). "Setting Up Two-Factor Authentication (2FA)."

Supporting Rejection of A: This guide details the setup process, which centers on installing an authenticator application on a secondary device (e.g., a mobile phone) to generate verification codes. It does not specify email as the delivery method for the verification code during a standard login.