While analyzing a company's security solution, a Security Engineer wants to secure the AWS account root user. What should the Security Engineer do to provide the highest level of security for the account?
A.
Create a new IAM user that has administrator permissions in the AWS account. Delete the password for the AWS account root user.
B.
Create a new IAM user that has administrator permissions in the AWS account. Modify the permissions for the existing IAM users.
C.
Replace the access key for the AWS account root user. Delete the password for the AWS account root user.
D.
Create a new IAM user that has administrator permissions in the AWS account. Enable multi-factor authentication for the AWS account root user.
Suggested Answer:D🗳️
If you continue to use the root user credentials, we recommend that you follow the security best practice to enable multi-factor authentication (MFA) for your account. Because your root user can perform sensitive operations in your account, adding an additional layer of authentication helps you to better secure your account. Multiple types of MFA are available. Reference: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_root-user.html
MFA is the most efficient way to secure the root account because it is consider an AWS best practice. Another option would be to not use the root account and to create an IAM user with the same admin right as the root account.
A - Not correct, one cannot delete the password for the AWS account root user
B - Not correct, does not secure the root user
C - Not correct, recommendation is to delete the access keys for root user
D - Ok, user with admin to be used instead of root user. Enable MFA for root user
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
lunamycat
Highly Voted 3 years, 7 months agoITGURU51
Most Recent 2 years, 1 month agoEll89
2 years, 2 months agoMungKey
2 years, 8 months agoRadhaghosh
3 years, 3 months agokiev
3 years, 6 months agoLarsson
3 years, 6 months agoNANDY666
3 years, 6 months agodevjava
3 years, 7 months agoDanMuniz
3 years, 7 months agogfhbox0083
3 years, 7 months agoRaj9
3 years, 7 months agoRaySmith
3 years, 7 months ago