Which action should a company take to improve security in its AWS account?

Question

Options

• ARequire multi-factor authentication (MFA) for privileged users.
• BRemove the root user account.
• CCreate an access key for the AWS account root user.
• DCreate an access key for each privileged user.

• A
  85% (11)
• C
  8% (1)
• D
  8% (1)

Explanation

Explanation

Requiring MFA for privileged users adds a critical second layer of authentication, meaning that even if a password is compromised, an attacker cannot access the account without the physical or virtual MFA device - this is a fundamental AWS security best practice. Option B is incorrect because the root user account cannot be removed; it is permanently tied to the AWS account and should instead be secured and rarely used. Option C is the opposite of best practice - AWS explicitly warns against creating access keys for the root user, as this exposes the most powerful account credentials to potential compromise. Option D is also discouraged because access keys are long-term static credentials that increase the attack surface; privileged users should instead use temporary credentials through roles where possible.

Memory Tip: Think "MFA = More Fortress Access" - always layer security with MFA for powerful users, and remember that root should be locked away, not armed with keys.

No community discussion yet for this question.