Sophos Certified Engineer Practice Exam

True or False: Multi-factor authentication is enabled by default for all Enterprise Administrators.

1. True

2. False

3. Enabled upon request only

4. Only for new administrators

The correct answer is: True

Multi-factor authentication (MFA) is a critical security feature designed to provide an additional layer of protection for user accounts, especially for privileged roles like Enterprise Administrators. The practice of enabling MFA by default for Enterprise Administrators ensures that these accounts, which have elevated permissions and access to sensitive data, are better protected against unauthorized access. This can significantly reduce the risk of account compromise. By having MFA enabled by default, organizations can enhance their overall security posture and minimize potential vulnerabilities associated with administrator accounts. Trusting that individuals will request this level of security might lead to inconsistent implementation across the organization, making it more susceptible to attacks. Therefore, enabling MFA automatically for Enterprise Administrators reinforces the importance of securing high-risk accounts from the outset.