A malicious actor conducted a brute-force attack on a company's web servers and eventually gained access to the company's customer information database. Which of the following is the most effective way to prevent similar attacks?

Multifactor authentication (MFA) is the most effective preventative measure because it requires users to provide two or more verification factors to gain access, even if an attacker compromises a password through a brute-force attack. Regular patching of servers is crucial for security but primarily addresses known vulnerabilities, not brute-force password guessing. Web application firewalls (WAFs) can help detect and block some brute-force attempts by analyzing traffic patterns, but they might not prevent all sophisticated attacks and don't add an additional authentication layer. Enabling encryption of customer data protects data confidentiality if a breach occurs but does not prevent unauthorized access to the database itself via compromised credentials.