
Answer-first summary for fast verification
Answer: Regularly rotate access keys, passwords, and tokens., Enable multi-factor authentication for enhanced security.
The correct answers are C and E. AWS recommends rotating credentials on a regular basis to minimize the risk of unauthorized access if credentials are compromised. This practice helps ensure that any potential unauthorized access is limited in duration. Additionally, configuring multi-factor authentication (MFA) adds an extra layer of security by requiring users to provide an additional piece of information, such as a temporary code from a mobile device or hardware token, along with their regular password. This makes it more difficult for unauthorized users to gain access, even if they have obtained a user's password or access keys. Options A, B, and D are not considered best practices. Using the AWS account root user for daily access (A) is discouraged due to the high level of permissions associated with the root account. Using access keys and secret access keys on EC2 instances (B) is not a best practice as it can lead to security risks if not managed properly. Creating a shared set of access keys for system administrators (D) is also not recommended as it can lead to a lack of accountability and increased risk of unauthorized access.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
Select two AWS best practice recommendations for managing IAM:
A
Utilize the AWS account root user for routine access.
B
Implement access keys and secret access keys on EC2 instances.
C
Regularly rotate access keys, passwords, and tokens.
D
Establish a common set of access keys for administrative users.
E
Enable multi-factor authentication for enhanced security.
No comments yet.