how does multi-factor authentication help protect you against authentication fraud? select the best answer.

Multi‑factor authentication (MFA) helps protect you from authentication fraud because it adds extra, independent layers of verification so a stolen password by itself is not enough to break into your account.

Core idea in one line

Even if an attacker steals or guesses your password, they still need a second factor (like a one‑time code or biometric) that they usually cannot access, so most account‑takeover attempts fail.

What this looks like in practice

• You enter your username and password (factor: something you know).

• The site then asks for another factor, such as:
  • A one‑time code sent to your phone or generated by an app (something you have).

* A fingerprint or face scan (something you are).

• Access is granted only if all factors are correct, so a criminal needs multiple things, not just your password.

How it specifically stops fraud

• Stolen or leaked passwords become far less useful : In data breaches or credential‑stuffing attacks, attackers may know your password but usually do not control your phone or biometric, so the login attempt is blocked.

• Phishing damage is limited : If you are tricked into giving away a password on a fake site, the attacker still lacks the valid second factor, so they typically cannot complete the login on the real site.

• Account takeover risk drops : Most fraud that relies on simply logging in as you (to move money, change settings, or steal data) becomes much harder because the attacker must also bypass the extra factor.

“Best answer” phrased simply

The best answer choice is the one that says something like:

“It requires two or more independent factors (such as a password plus a code or biometric), so attackers who steal your password alone still cannot access your account, greatly reducing account‑takeover and other authentication fraud.”

TL;DR: MFA protects you against authentication fraud by making a password alone insufficient to log in , so most attacks that rely on stolen or guessed passwords are stopped before they reach your account.