AWS Certified Cloud Practitioner CLF-C02Demo

By Amazon · Question Mode

QuestionQ674

Content Domain 2: Security and Compliance

A company is configuring AWS Identity and Access Management (IAM) for an AWS account.

Which recommendation follows IAM security best practices?

  • A Use the account root user access keys for administrative tasks.
  • B Grant broad permissions so that all company employees can access the resources they need.
  • C Turn on multi-factor authentication (MFA) for added security during the login process.
  • D Avoid rotating credentials to prevent issues in production applications.
Explanation

IAM recommends requiring multi-factor authentication (MFA) to add a second authentication factor and strengthen protection of AWS identities. IAM best practices also call for least-privilege permissions, avoiding root-user access keys, and updating long-term access keys when they are needed.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!