Which of the following are ways to improve security on AWS? (Choose two.)

Question

Options

• AUsing AWS Artifact
• BGranting the broadest permissions to all IAM roles
• CRunning application code with AWS Cloud
• DEnabling multi-factor authentication (MFA) with Amazon Cognito
• EUsing AWS Trusted Advisor security checks

• A
  2% (1)
• B
  2% (1)
• C
  6% (3)
• D
  90% (43)

Explanation

Explanation

Enabling MFA with Amazon Cognito (D) adds an extra layer of identity verification, requiring users to provide a second form of authentication beyond just a password - a fundamental security best practice. AWS Trusted Advisor security checks (E) actively scan your AWS environment for security vulnerabilities and misconfigurations, providing actionable recommendations to improve your security posture.

Why the distractors are wrong:

• A (AWS Artifact) is a compliance documentation portal for downloading audit reports and agreements - it's about compliance, not actively improving security configurations.
• B (Broadest permissions) directly violates the Principle of Least Privilege, which is a core AWS security principle - always grant minimum necessary permissions.
• C (Running code on AWS Cloud) simply describes using the platform; moving to the cloud doesn't inherently improve security on its own.

Memory Tip

Think "MFA + Monitor" - the two correct answers both actively protect your environment: MFA verifies identity, and Trusted Advisor monitors for weaknesses. If an answer describes access to documents or broad permissions, it's a red flag - real security is about restricting access and staying vigilant.

No community discussion yet for this question.