Exam AWS Certified Cloud Practitioner CLF-C02 topic 1 question 160 discussion

C. Enable multi-factor authentication (MFA) on the root user: Enabling MFA adds an extra layer of security to the root user account. Even if someone gains access to the root user credentials, they would also need the second factor (such as a phone or hardware token) to access the account. D. Create an IAM user with administrator privileges for daily administrative tasks, instead of using the root user: It is a best practice to avoid using the root user for day-to-day tasks because the root user has unrestricted access to all resources and can make significant changes to your account. Instead, you should create an IAM user with administrator privileges and use that for routine management tasks.

The best practices for an AWS account root user are: C. Enable multi-factor authentication (MFA) on the root user. Enabling MFA adds an extra layer of security to protect the root user account from unauthorized access. D. Create an IAM user with administrator privileges for daily administrative tasks, instead of using the root user. It's recommended to create an IAM user with the necessary permissions for daily administrative tasks rather than using the root user. This practice helps in maintaining better security and accountability by reducing the reliance on the highly privileged root user account. So, the correct options are C and D

CD are correct