QUESTION

Why is the detection, Okta User MFA Factor Suspend, considered to indicate a suspected compromise?

ANSWER

This detection's description and design came from this Okta documentation.