Web Security · Senior · Question 37 of 75
Which signals justify step-up authentication in the middle of a session?
- 1Any page load longer than 2 seconds
- ✓Correct answer: Sensitive actions (payouts, changing MFA) or risk signals like a new device or location
- 3The user scrolling to the bottom of a page
Explanation
Asking again only when the risk is high keeps friction low while protecting the operations attackers care about.