QuickBooks Certified User (QBCU) Practice Exam

The main concept being tested is adding an extra verification step at sign-in. Two-factor authentication requires a second form of proof beyond the password—such as a code from an authenticator app, a SMS code, or a security key—so you must present something you know (the password) and something you have (the second factor) to access QuickBooks Online. This dual requirement makes it much harder for someone to break in if your password is compromised. Other options don’t provide this ongoing second-check at login. Password reset or security questions are used mainly for account recovery, not for confirming identity at every sign-in. IP whitelisting controls which networks can access the account but doesn’t require the user to prove their identity at login with a second factor.