nerdexam
Amazon

CLF-C02 · Question #772

A company's information security manager is supervising a move to AWS and wants to ensure that AWS best practices are followed. The manager has concerns about the potential misuse of AWS account root

The correct answer is C. Use the account root user credentials only when they alone must be used to perform a required. AWS best practice is to avoid using the root user for everyday tasks. The root user should only be used for specific account-level functions that require it, such as closing the account or changing root credentials. All other tasks should be performed using IAM users or roles wit

Submitted by valeria.br· Mar 6, 2026Security and Compliance

Question

A company's information security manager is supervising a move to AWS and wants to ensure that AWS best practices are followed. The manager has concerns about the potential misuse of AWS account root user credentials. Which of the following is an AWS best practice for using the AWS account root user credentials?

Options

  • AAllow only the manager to use the account root user credentials for normal activities.
  • BUse the account root user credentials only for Amazon EC2 instances from the AWS Free Tier.
  • CUse the account root user credentials only when they alone must be used to perform a required
  • DUse the account root user credentials only for the creation of private VPC subnets.

How the community answered

(24 responses)
  • B
    4% (1)
  • C
    92% (22)
  • D
    4% (1)

Explanation

AWS best practice is to avoid using the root user for everyday tasks. The root user should only be used for specific account-level functions that require it, such as closing the account or changing root credentials. All other tasks should be performed using IAM users or roles with least privilege

Community Discussion

No community discussion yet for this question.

Full CLF-C02 Practice