{
  "id": "06",
  "content": [
    {
      "type": "heading",
      "text": "SMS and Email Codes"
    },
    {
      "type": "text",
      "html": "Many services send codes via text message or email. These are better than no MFA but less secure due to phishing or SIM\u2011swap risks."
    },
    {
      "type": "text",
      "html": "Prefer app\u2011based or hardware MFA when available."
    }
  ],
  "quiz": {
    "questions": [
      {
        "id": "q1",
        "type": "single",
        "text": "Why is SMS MFA less secure?",
        "options": [
          {
            "id": "a",
            "text": "Attackers can hijack your phone number (SIM swap)"
          },
          {
            "id": "b",
            "text": "Text messages are encrypted end\u2011to\u2011end"
          },
          {
            "id": "c",
            "text": "It requires too many steps"
          }
        ],
        "correct": [
          "a"
        ]
      },
      {
        "id": "q2",
        "type": "single",
        "text": "What\u2019s still good about SMS codes?",
        "options": [
          {
            "id": "a",
            "text": "They\u2019re widely supported and better than no MFA"
          },
          {
            "id": "b",
            "text": "They are unbreakable"
          },
          {
            "id": "c",
            "text": "They work without a phone"
          }
        ],
        "correct": [
          "a"
        ]
      }
    ]
  }
}