Which mechanism is commonly used to enforce privileged access in FOSSE?

• A. MFA for privileged actions
• B. Free-for-all access
• C. Password length only
• D. Biometric login for all users

Answer: (A)

Requiring multi-factor authentication for privileged actions is the usual way to enforce privileged access in FOSSE. By tying elevated operations to an additional verification step beyond just a password, you significantly reduce the risk that a stolen credential alone could be used to perform sensitive tasks. This step-up approach lets normal tasks proceed with standard credentials, while anything that could impact systems or data—like deploying changes or accessing privileged data—triggers an MFA prompt. It also strengthens auditability, since each privileged action is linked to a specific second factor, making it easier to identify who did what and when. The other options don’t fit because free-for-all access discards security controls; relying on password length alone leaves credentials vulnerable to guessing or theft; and using biometric login for all users isn’t targeted to privileged actions and can raise implementation and privacy challenges.