An organization is implementing a new hybrid cloud deployment and wants all employees to provide...

The requirement for a username, password, and security token describesauthentication—the process of verifying the identity of a user. By requiring multiple factors (something you know + something you have), the organization is implementing multifactor authentication (MFA).

Authorization defines what resources a user can access after authentication. WAFs protect web applications, and ACLs specify rules for allowed or denied traffic, but neither validate user identity.

Authentication ensures that only legitimate users gain access to cloud resources. In hybrid environments, MFA is a strong safeguard against credential theft and phishing attacks, providing assurance that identities are genuine before authorization decisions are made.