{
  "id": "08",
  "content": [
    {
      "type": "heading",
      "text": "Common MFA Mistakes"
    },
    {
      "type": "text",
      "html": "<ul><li>Using SMS when better options exist</li><li>Not saving backup codes</li><li>Ignoring recovery setup</li><li>Approving push requests blindly</li></ul>"
    },
    {
      "type": "text",
      "html": "Always verify login attempts before approving notifications."
    }
  ],
  "quiz": {
    "questions": [
      {
        "id": "q1",
        "type": "single",
        "text": "Which is a common MFA mistake?",
        "options": [
          {
            "id": "a",
            "text": "Approving every push notification without checking"
          },
          {
            "id": "b",
            "text": "Using authenticator apps"
          },
          {
            "id": "c",
            "text": "Saving backup codes"
          }
        ],
        "correct": [
          "a"
        ]
      },
      {
        "id": "q2",
        "type": "single",
        "text": "What should you do before approving a login request?",
        "options": [
          {
            "id": "a",
            "text": "Verify it\u2019s really you logging in"
          },
          {
            "id": "b",
            "text": "Click approve immediately"
          },
          {
            "id": "c",
            "text": "Ignore it"
          }
        ],
        "correct": [
          "a"
        ]
      }
    ]
  }
}