CLF-C02 Question 112
Select 2Which of the following actions can help protect the AWS root user account from unauthorized access? (Select TWO)
- A
Enable Multi-Factor Authentication (MFA) for the root user account.
- B
Share the root account credentials only with trusted team members.
- C
Delete the root user account after creating an IAM administrator account.
- D
Use the root user only for tasks that explicitly require it.
- E
Create an IAM role with elevated permissions to replace the root user account.
Show answer and explanation
Correct answers: A, D
Explanation
Protecting the AWS root user account is essential for security. Enabling MFA ensures an additional layer of protection against unauthorized access, while restricting the use of the root user to only necessary tasks reduces exposure to risks. Sharing credentials or attempting to replace the root user is against AWS best practices and could compromise account security.
- A. Correct.
Enabling Multi-Factor Authentication (MFA) for the root user account adds an additional layer of security, making it harder for unauthorized users to gain access.
- B. Incorrect.
Sharing the root account credentials, even with trusted team members, is a security risk and is not recommended. Instead, IAM users or roles should be used.
- C. Incorrect.
The root user account cannot be deleted. This option is invalid.
- D. Correct.
Using the root user only for tasks that explicitly require it minimizes the risk of accidental or unauthorized use.
- E. Incorrect.
Creating an IAM role with elevated permissions does not replace the root user account. The root user is unique and cannot be fully replaced.