Examkin

Question

Difficulty: EasyIdentity and Access Management (IAM)

A company has recently created a new AWS account. To ensure the account is secure, which two actions should the administrator perform on the AWS account root user? (Select TWO.)

  1. Enable multi-factor authentication (MFA) for the root user.Answer
  2. Delete any active access keys associated with the root user.Answer
  3. C
    Use the root user credentials for daily administrative and operational tasks.
  4. D
    Create an IAM role for the root user to restrict its permissions when accessing database services.
  5. E
    Use the root user to monitor and manage physical access controls in AWS data centers.

Answer

Enabling multi-factor authentication (MFA) for the root user and deleting any active access keys associated with the root user.
Enabling multi-factor authentication (MFA) and deleting active access keys are primary security best practices for the AWS account root user. MFA provides an additional security layer for console logins, while removing access keys prevents programmatic administrative API access.

Step-by-Step Solution

1
Identify the recommended practices for securing the AWS account root user.
The root user has unrestricted access and should not be used for daily tasks or programmatic API calls.
Securing the root user prevents full compromise of the AWS account.
2
Select security actions that mitigate credentials exposure and add security layers.
Enabling MFA and removing access keys reduces the risk of credential compromise.
MFA prevents unauthorized console access, and removing access keys prevents unauthorized programmatic access.

Key Concept

AWS Account Root User Security Best Practices
Rate this question

Topics

Identity and Access Management (IAM)

More questions from this topic