Which security factor is a common contributor to data breaches when using cloud-based apps?

• A. Weak or no passwords on mobile devices
• B. Lack of encryption at rest
• C. Unpatched servers
• D. Misconfigured ACLs

Answer: (A)

Authentication strength when accessing cloud-based apps matters most. If mobile devices used to sign in have weak or no passwords, an attacker can gain credentials or impersonate a user, especially if a device is lost, stolen, or the user reuses passwords across services. Once access to the cloud app is obtained through weak credentials, sensitive data can be exposed regardless of other protections like encryption at rest or server patching. Encryption and patches are important, but they don’t help if the attacker already has valid access. Misconfigurations and unpatched servers are real risks, yet the most frequent breach driver in cloud app usage is weak or absent passwords on devices used to connect to those apps. Strengthening credential controls, enabling multi-factor authentication, and enforcing proper device security dramatically reduce this risk.