Q32 — AWS SAA-C03 Ch.12

Question 32 of 100 | ← Chapter 12

Q832. A company uses AWS to run its ecommerce platform. The platform is critical to the company's operations and has a high volume of traffic and transactions. The company configures a multi-factor authentication (MFA) device to secure its AWS account root user credentials. The company wants to ensure that it will not lose access to the root user account if the MFA device is lost.Which solution will meet these requirements?

• A. Set up a backup administrator account that the company can use to log in if the company loses the MFA device.
• B. Add multiple MFA devices for the root user account to handle the disaster scenario. ✓
• C. Create a new administrator account when the company cannot access the root account.
• D. Attach the administrator policy to another IAM user when the company cannot access the root account.

Correct Answer: B. Add multiple MFA devices for the root user account to handle the disaster scenario.

Explanation

To ensure access to the AWS account root user in the event of losing the MFA device, you can follow these steps:Step 1: Add multiple MFA devices for the root user account (Option B)AWS allows you to associate multiple MFA devices with the root user account. By adding additional MFA devices, such as hardware tokens or virtual MFA devices, you create redundancy in case one of the devices is lost or inaccessible.Step 2: Configure MFA settings for the root user accountOnce the additional MFA devices are added, configure the MFA settings for the root user account to require MFA authentication during login. This ensures that any attempt to access the root user account requires the authentication from one of the associated MFA devices.By adding multiple MFA devices for the root user account, you provide a disaster recovery mechanism to ensure continued access to the account even if one of the devices is lost. This solution is best suited for critical systems like e-commerce platforms, where uninterrupted access to the root user account is crucial.Option A suggests setting up a backup administrator account. While this can provide an alternative means of access, it does not directly address the requirement of ensuring access to the root user account specifically.Option C suggests creating a new administrator account. However, creating a new account in response to losing the MFA device may not be the most efficient or practical solution, especially if the root user account is critical to the company's operations.Option D suggests attaching the administrator policy to another IAM user. While this can provide administrative access, it does not specifically address the need for MFA authentication and may not provide the same level of security as using multiple MFA devices for the root user account.Therefore, option B is the most appropriate solution to ensure access to the AWS account root user if the MFA device is lost, by adding multiple MFA devices for the root user account to handle the disaster scenario.