Which practice reduces the risk of account takeover?

• A. Enable multi-factor authentication
• B. Use the same password across accounts
• C. Disable notifications of account activity
• D. Never check account activity

Answer: (A)

Adding a second verification step through multi-factor authentication dramatically lowers the chance an attacker can take over an account. If someone obtains your password, they still need the second factor to log in, such as a code from an authenticator app, a hardware security key, or a biometric prompt. That extra hurdle stops most unauthorized access even when passwords are compromised, making it a strong defense against phishing, credential stuffing, and password reuse.

By comparison, using the same password across sites creates a single point of failure—breach one place and others can be breached too. Disabling account activity notifications or never checking activity hides signs of unauthorized access, which delays detection and response. Enabling MFA directly reduces the likelihood of takeover and improves security overall.