CLF-C02 Question 114
Select 2Which of the following actions can help protect the root user account in an AWS environment? (Select TWO)
- A
Enable multi-factor authentication (MFA) for the root user.
- B
Share the root user credentials only with trusted team members.
- C
Delete the root user account after creating an IAM administrator account.
- D
Use the root user only for tasks that require it, such as account setup.
- E
Store the root user credentials in plaintext for easy access during emergencies.
Show answer and explanation
Correct answers: A, D
Explanation
Protecting the root user account is critical in AWS because it has unrestricted access to all resources in the account. Enabling MFA and limiting the use of the root user to essential tasks are best practices to secure this account. Sharing credentials or storing them insecurely should always be avoided, and the root user cannot be deleted.
- A. Correct.
Enabling MFA adds an additional layer of security to the root user account, making it harder for unauthorized individuals to gain access.
- B. Incorrect.
Sharing the root user credentials, even with trusted team members, is not a secure practice as it increases the risk of misuse or accidental changes.
- C. Incorrect.
It is not possible to delete the root user account in AWS, as it is the primary account created during AWS sign-up.
- D. Correct.
Using the root user only for tasks that explicitly require it minimizes the exposure of the account, reducing the risk of accidental or malicious actions.
- E. Incorrect.
Storing credentials in plaintext is a highly insecure practice and increases the likelihood of them being compromised.