Problem
ACME Furniture is a small company designing custom furniture. ACME management wants to expand the company sales and created a website hosted with a major hosting company. They also set up an ordering procedure so that the customers can order and pay for the furniture online.
ACME management is not sure what kind of authentication security procedures they should deploy for this website. They hired you as a Security Analyst to help them choose one of the following 4 options:
a) Allow users to browse the website without a user making account. Use another service provider to handle all credit card order processing.
b) Allow users to browse the website without making a user account but requiring all customers who place orders online to make a user account.
c) Allow users to browse the website without creating a user account but requiring all customers who place orders online to make a user account, and also require a phone number so that logins can be verified using 2-factor authentication.
d) Require users to create a user account before they can browse the furniture catalog or see any of the website content.
Describe your recommendation. Explain why you chose the selected option and why other options are not preferred or are impractical for ACME Kitchens.