Certified Incident Handler (CIH) Practice Ecam

Which practice helps incident responders contain Azure-based security incidents?

1. Establish number matching for MFA

2. Implementing a strong password policy

3. Conducting regular security audits

4. Monitoring network traffic in real-time

The correct answer is: Establish number matching for MFA

The practice of establishing number matching for Multi-Factor Authentication (MFA) is particularly effective in enhancing security for Azure-based incidents by reducing the risk of unauthorized access. Number matching requires users to enter a code that is presented to them during the authentication process, ensuring that even if an attacker has the user’s credentials, they cannot gain access without the second factor of authentication. This method helps in mitigating risks associated with phishing attacks, where users might inadvertently provide their credentials to malicious actors. By ensuring that the authentication process includes additional verification steps, it helps to contain incidents that could arise from compromised accounts, particularly in cloud environments like Azure where sensitive data is stored and accessed. While implementing strong password policies, conducting regular security audits, and monitoring network traffic in real-time are all vital components of a robust security strategy, they do not specifically target the issue of unauthorized access in the same way that establishing number matching for MFA does. Each of these practices contributes to overall security, but the direct focus on enhancing the verification process through number matching is particularly critical for incident containment in the context of Azure cloud environments.