A team implements MFA but leaves an old authentication path that bypasses it. What should the manager prioritize?

1. Increase disk capacity
2. Publish an additional MFA poster only
3. Close or control the bypass and validate all relevant access paths
4. Count MFA enrollment as complete protection