When tasked with strengthening user authentication, what methods would you use to?
You probably already recognize this as an operational question. This is specifically asking you about the process you use to perform a task. As a reminder, operational questions should be answered directly and succinctly, and you should anticipate follow-up questions.
"One of the key elements of data security is user authentication. The most basic form of user authentication is supplying the user with a username and password. This is needed at any time the user logs in to the application or the network. A higher level of security is known as two-step authentication. In addition to the user ID and password, a code is sent to a device the user has pre-registered. They are then required to input the code before they are allowed to access the network."
Community answers are written by other candidates practicing this set. Reading how others frame the same question is one of the fastest ways to sharpen your own.
Anonymous Answer
I would implement 2-factor authentication in the environment. A code could be sent to users' phones or app. We could use some kind of biometric factor applied to ensure each user is authorized to have access.
Stephanie's Feedback
Great--it sounds like you have a good deal of content knowledge in this area!
