A help desk receives many reports of repeated unsolicited MFA approvals, followed by one user accepting a prompt to stop the interruptions. What technique was used?

1. DNS amplification
2. MFA fatigue
3. Directory traversal
4. ARP poisoning