In high-risk environments, password reset risks are reduced by requiring the user's physical presence.

• A. TRUE
• B. FALSE
• C. NOT SURE
• D. REQUIRING THE USER'S PHYSICAL PRESENCE REDUCES RESET RISKS

Answer: (D)

Requiring the user's physical presence adds a strong, in-person check that cannot be easily spoofed from afar. In high‑risk settings, password resets often become targets for social engineering, phishing, or using stolen credentials. When someone must be physically present to verify identity—showing a government ID or employee badge,確認ng with a trusted administrator, or performing the reset at a secure location—the verifier can confirm who is requesting the reset and ensure the request comes from a legitimate user. This extra barrier makes it much harder for an attacker to impersonate someone and obtain reset privileges, thereby reducing reset-related risks. In practice, this approach is often paired with other controls like MFA or out-of-band verification for even stronger protection.