100-140 Question 138
Single answerAn employee at your company reports being unable to log in to their corporate email account after enabling multifactor authentication (MFA) with an authenticator app. Upon investigation, you find that the employee recently replaced their smartphone without transferring the authenticator app configuration. What is the best course of action to resolve this issue?
- A
Advise the employee to reinstall the authenticator app and manually reconfigure MFA using backup codes or recovery options.
- B
Disable MFA for the employee permanently to prevent future login issues.
- C
Ask the employee to contact the email service provider to disable MFA temporarily.
- D
Instruct the employee to create a new email account and migrate all their data to it.
Show answer and explanation
Correct answer: A
Explanation
When an employee replaces their smartphone without transferring their authenticator app configuration, backup codes or recovery options provided during the MFA setup process are the best way to restore access. This approach maintains the security benefits of MFA while resolving the issue efficiently. Disabling MFA or creating a new account introduces unnecessary risks or complications.
- A. Correct.
This is the correct action because reinstalling the authenticator app and using backup codes or recovery options ensures the user can regain access without compromising security.
- B. Incorrect.
Disabling MFA permanently is not recommended as it significantly reduces the security of the user's account.
- C. Incorrect.
While contacting the email service provider may be possible, it is not the most efficient or secure first step to resolve the issue.
- D. Incorrect.
Creating a new email account is unnecessary and does not address the root cause of the problem.