How do I know if we are using multi-factor authentication?
It should be fairly simple to determine if you are using multi-factor authentication. Do you ever have to do something other than provide a username and password? For example, when you use a new device, do you have to something special? The second factor other than a username/password pair will mostly commonly be a unique code, either generated by an app on your phone (an “authenticator” app) or something you receive in a text message. Note that having to provide answers to security questions don’t provide a second factor - that’s just a more complicated password. Security questions generally provide very little, if any, additional security.