Which practice best protects a government email account from being taken over by attackers?
Correct answer: A. Using a strong, unique password together with multi-factor authentication
Strong, unique passwords and multi-factor authentication make account takeover much harder. Reusing or sharing passwords means one leak can expose many accounts, and shared access also makes it impossible to tell who did what.