Evaluate Logical Access Controls And Authentication Practice Test

An auditor evaluating logical access controls selects a sample of active user accounts in a financial system and requests confirmation from the system owner that each account is still needed and appropriately privileged. This procedure tests:

Which of the following authentication methods provides the strongest protection against credential theft attacks such as phishing?