CLF-C02 Question #589: Real Exam Question with Answer & Explanation

The correct answer is A: Set up multi-factor authentication (MFA) for the root user.. Set up multi-factor authentication (MFA) for the root user: Enabling MFA for the root user adds an additional layer of security to help protect the account from unauthorized access, which is a security best practice. Delete the root user access keys: It is recommended to delete t

Submitted by chiamaka_o· Mar 6, 2026Security and Compliance

Question

Which actions are AWS security best practices for using AWS Identity and Access Management (IAM) to manage an AWS account root user? (Choose two.)

Options

ASet up multi-factor authentication (MFA) for the root user.
BRemove all IAM policies from the root user.
CDelete the root user access keys.
DUse the root user for daily tasks.
EAssign a read-only access policy to the root user.

Explanation

Set up multi-factor authentication (MFA) for the root user: Enabling MFA for the root user adds an additional layer of security to help protect the account from unauthorized access, which is a security best practice. Delete the root user access keys: It is recommended to delete the root user's access keys if they are not needed for automation tasks. The root user should ideally not be used for everyday operations, and removing access keys minimizes security risks.

Community Discussion

No community discussion yet for this question.

Full CLF-C02 Practice Browse All CLF-C02 Questions