Explanation:
Rotating the IAM user's access keys and updating the password ensures that any previously compromised credentials are no longer valid. Deleting the user might disrupt operations if the user is legitimate. Disabling permissions might not address the immediate threat of ongoing unauthorized access. Increasing permissions would exacerbate the security risk.
Ultimate access to all questions.
No comments yet.
You suspect that an IAM user's credentials have been compromised. What steps should you take to mitigate the risk and prevent unauthorized access?
A
Delete the IAM user immediately.
B
Rotate the IAM user's access keys and update the password, then monitor for unusual activity.
C
Disable the IAM user's permissions temporarily.
D
Increase the IAM user's permission level to allow for easier monitoring.