Examkin

Question

Difficulty: EasyIdentity and Access Management (IAM)

A startup has just created its first AWS account and wants to secure the account root user. Which of the following actions represent AWS security best practices for protecting the account root user? (Select TWO.)

  1. Enable multi-factor authentication (MFA) for the root user.Answer
  2. Avoid using the root user for daily administrative tasks.Answer
  3. C
    Share the root user password with all system administrators.
  4. D
    Generate access keys for the root user to run programmatic scripts.
  5. E
    Use the root user credentials to integrate third-party applications.

Answer

Enabling multi-factor authentication (MFA) for the root user and avoiding using the root user for daily administrative tasks.
Securing the AWS account root user requires enabling multi-factor authentication (MFA) to prevent unauthorized access and using IAM users or roles for daily administration rather than using the root user directly.

Step-by-Step Solution

1
Identify the options that follow the principle of least privilege and root user protection rules.
Enabling multi-factor authentication (MFA) adds an essential security layer, and avoiding root usage for everyday tasks prevents accidental or unauthorized administrative actions.
AWS strongly recommends securing the root user immediately after account creation and using IAM entities instead.

Key Concept

Root user security best practices, including enabling MFA and delegating administrative tasks to IAM users or roles.
Rate this question

Topics

Identity and Access Management (IAM)

More questions from this topic