
Answer-first summary for fast verification
Answer: It should be accessible by one admin only after enabling Multi-factor authentication
Overall explanation Correct option: It should be accessible by one admin only after enabling Multi-factor authentication AWS Root Account Security Best Practices: via - https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html#lock-away-credentials If you continue to use the root user credentials, we recommend that you follow the security best practice to enable multi-factor authentication (MFA) for your account. Because your root user can perform sensitive operations in your account, adding a layer of authentication helps you to better secure your account. Multiple types of MFA are available. Incorrect options: It should be accessible by 3 to 6 members of the IT team - Only the owner of the AWS account should have access to the root account credentials. You should create an IT group with admin permissions via IAM and then assign a few users to this group. It should be accessible using the access key id and secret access key - AWS recommends that you should not use the access key id and secret access key for the AWS account root user. It should be accessible by no one, throw away the passwords after creating the account - You will still need to store the password somewhere for your root account.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
No comments yet.
When your company initially established an AWS account, you started with a single sign-in entity known as the root user account. This root user account possesses unrestricted access to all AWS services and resources.
What actions should you take to ensure adherence to best practices when using the root user account?
A
It should be accessible using the access key id and secret access key
B
It should be accessible by one admin only after enabling Multi-factor authentication
C
It should be accessible by 3 to 6 members of the IT team
D
It should be accessible by no one, throw away the passwords after creating the account