8. A user's account is accessed at odd hours from different locations, despite MFA. What's the most likely cause?
- D) MFA guarantees account safety, so it's a false alarm
- B) The account has been compromised via a token/session hijack
- C) The system is misconfigured
- A) The user is traveling