Which statement accurately reflects common authentication methods and their security implications?

• A. Passwords are prone to theft, MFA provides stronger resistance, biometrics offer convenience with spoofing risk, and phishing remains a risk vector.
• B. Biometrics are always secure and cannot be spoofed.
• C. MFA is weaker than passwords.
• D. Phishing is no longer a concern with modern passwords.

Answer: (A)

Authentication methods and their security implications.

Passwords are easy to steal, guess, or reuse across sites, which is why they’re often targeted in breaches and credential stuffing attacks. Adding multi-factor authentication (MFA) strengthens security by requiring a second form of proof beyond the password, making unauthorized access far less likely if the password is compromised. Biometrics offer convenient sign-ins, but they aren’t foolproof—spoofing, presentation attacks, or sensor flaws can allow attackers to bypass them, and unlike passwords, biometric credentials can’t be changed if compromised. Phishing remains a risk even with modern passwords and MFA, because users can be tricked into revealing credentials or approving fraudulent prompts, or attackers can capture MFA codes or prompt approvals in real time. This combination of effects—vulnerable passwords, stronger protection with MFA, cautious use of biometrics due to spoofing risks, and persistent phishing threats—best reflects how authentication methods impact security.