Soru

Zorluk: KolayIdentity and Access Management (IAM)

A startup has just created its first AWS account and wants to secure the account root user. Which of the following actions represent AWS security best practices for protecting the account root user? (Select TWO.)

  1. Enable multi-factor authentication (MFA) for the root user.Cevap
  2. Avoid using the root user for daily administrative tasks.Cevap
  3. C
    Share the root user password with all system administrators.
  4. D
    Generate access keys for the root user to run programmatic scripts.
  5. E
    Use the root user credentials to integrate third-party applications.

Cevap

Enabling multi-factor authentication (MFA) for the root user and avoiding using the root user for daily administrative tasks.
Securing the AWS account root user requires enabling multi-factor authentication (MFA) to prevent unauthorized access and using IAM users or roles for daily administration rather than using the root user directly.

Adım Adım Çözüm

1
Identify the options that follow the principle of least privilege and root user protection rules.
Enabling multi-factor authentication (MFA) adds an essential security layer, and avoiding root usage for everyday tasks prevents accidental or unauthorized administrative actions.
AWS strongly recommends securing the root user immediately after account creation and using IAM entities instead.

Anahtar Kavram

Root user security best practices, including enabling MFA and delegating administrative tasks to IAM users or roles.
Bu soruyu puanla