Exam AWS Certified Solutions Architect - Associate SAA-C02 All Questions

View all questions & answers for the AWS Certified Solutions Architect - Associate SAA-C02 exam

Exam AWS Certified Solutions Architect - Associate SAA-C02 topic 1 question 160 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C02

Question #: 160
Topic #: 1

[All AWS Certified Solutions Architect - Associate SAA-C02 Questions]

A company has established a new AWS account. The account is newly provisioned and no changed have been made to the default settings. The company is concerned about the security of the AWS account root user.
What should be done to secure the root user?

A. Create IAM users for daily administrative tasks. Disable the root user.
B. Create IAM users for daily administrative tasks. Enable multi-factor authentication on the root user.
C. Generate an access key for the root user. Use the access key for daily administration tasks instead of the AWS Management Console.
D. Provide the root user credentials to the most senior solutions architect. Have the solutions architect use the root user for daily administration tasks.

Show Suggested Answer

Suggested Answer: B 🗳️

by Asad85 at Aug. 10, 2020, 9:04 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

Asad85

Highly Voted 3 years, 9 months ago

Should be B

upvoted 74 times

...

mikmik

Highly Voted 3 years, 9 months ago

B. Passed exam today (Oct-3-2020). This questioned appeared on my exam. I'm marking this to help out future exam takers.

upvoted 55 times

arunchu

3 years, 9 months ago

Congrat mikmik!

upvoted 3 times

...

mfaktas

Most Recent 1 year, 8 months ago

Selected Answer: B

Disable root user made me laugh :)

upvoted 1 times

...

queen101

2 years, 10 months ago

BBBBBBBBBBBBBB

upvoted 1 times

...

woke

3 years, 8 months ago

B. Create IAM users for daily administrative tasks. Enable multi-factor authentication on the root user.

upvoted 4 times

...

syu31svc

3 years, 8 months ago

"secure the root user" -> answer is B; enable MFA

upvoted 5 times

...

KK_uniq

3 years, 8 months ago

MFA for sure. B right answer

upvoted 3 times

...

3 years, 9 months ago

how about A..? disable root is most secure method.

upvoted 1 times

johndoe1173

3 years, 8 months ago

you can't disable the root user in aws, it is the only one with billing credentials.

upvoted 4 times

...

VipG

3 years, 9 months ago

Should be B

upvoted 2 times

...

awsdec2020

3 years, 9 months ago

As other mentioned, examtopics intentionally gives wrong answers. "As a best practice, do not use the AWS account root user for any task where it's not required. Instead, create a new IAM user for each person that requires administrator access." It's B :)

upvoted 1 times

...

aguy9

3 years, 9 months ago

Answer is B

upvoted 1 times

...

SheldonHofstadter

3 years, 9 months ago

It's B. I saw the answer D and my whole understanding of IAM (user access in general) came crashing down. If it was that easy I wonder why I struggle with my admins to get access :P

upvoted 1 times

...

Load full discussion...