nerdexam
Amazon

SCS-C02 · Question #299

Your company has just started using AWS and created an AWS account. They are aware of the potential issues when root access is enabled. How can they best safeguard the account when it comes to root…

The correct answer is B. Create an Admin IAM user with the necessary permissions D. Delete the root access keys. The AWS Documentation mentions the following All AWS accounts have root user credentials (that is, the credentials of the account owner). These credentials allow full access to all resources Because you cant restrict permissions for root user credentials, we recommend that you…

Submitted by kev92· Mar 6, 2026Identity and Access Management

Question

Your company has just started using AWS and created an AWS account. They are aware of the potential issues when root access is enabled. How can they best safeguard the account when it comes to root access? Choose 2 answers fro the options given below

Options

  • ADelete the root access account
  • BCreate an Admin IAM user with the necessary permissions
  • CChange the password for the root account.
  • DDelete the root access keys

How the community answered

(23 responses)
  • A
    4% (1)
  • B
    83% (19)
  • C
    13% (3)

Explanation

The AWS Documentation mentions the following All AWS accounts have root user credentials (that is, the credentials of the account owner). These credentials allow full access to all resources Because you cant restrict permissions for root user credentials, we recommend that you delete your root user access keys. Then create AWS Identity and Access Management (IAM) user credentials for everyday interaction with AWS. Option A is incorrect since you cannot delete the root access account Option C is partially correct but cannot be used as the ideal solution for safeguarding the account

Topics

#root account security#IAM users#access keys#account hardening

Community Discussion

No community discussion yet for this question.

Full SCS-C02 Practice