CLF-C02 Question 104
Single answerA company wants to enhance the security of their AWS Management Console by enforcing an additional layer of authentication for all IAM users. Which of the following is the MOST appropriate solution to achieve this?
- A
Enable Multi-Factor Authentication (MFA) for all IAM users.
- B
Use IAM Identity Center to enforce password complexity policies.
- C
Create cross-account IAM roles for each user.
- D
Implement AWS WAF to block unauthorized access attempts.
Show answer and explanation
Correct answer: A
Explanation
To enhance security for IAM users accessing the AWS Management Console, enabling Multi-Factor Authentication (MFA) is the best practice. MFA adds an extra layer of protection by requiring a second factor, such as a one-time password, in addition to the user's regular credentials.
- A. Correct.
Enabling Multi-Factor Authentication (MFA) is the most appropriate solution to add an additional layer of authentication for IAM users. MFA requires users to provide a second factor (like a code from a mobile app) in addition to their password, enhancing security.
- B. Incorrect.
Using IAM Identity Center to enforce password complexity policies can improve password strength but does not provide an additional layer of authentication like MFA does.
- C. Incorrect.
Cross-account IAM roles are used to grant access to resources across accounts, not to enforce additional layers of authentication.
- D. Incorrect.
AWS WAF is a web application firewall that protects applications from web-based threats but does not address user authentication for the AWS Management Console.