Q5 — AWS SAA-C03 Ch.12

Question 5 of 100 | ← Chapter 12

Q805. A company has established a new AWS account. The account is newly provisioned and no changes have been made to the default settings. The company is concerned about the security of the AWS account root user.What should be done to secure the root user?

• A. Create IAM users for daily administrative tasks. Disable the root user.
• B. Create IAM users for daily administrative tasks. Enable multi-factor authentication on the root user. ✓
• C. Generate an access key for the root user. Use the access key for daily administration tasks instead of the AWS Management Console.
• D. Provide the root user credentials to the most senior solutions architect. Have the solutions architect use the root user for daily administration tasks.

Correct Answer: B. Create IAM users for daily administrative tasks. Enable multi-factor authentication on the root user.

Explanation

To secure the root user of a newly provisioned AWS account, the recommended solution is:B. Create IAM users for daily administrative tasks. Enable multi-factor authentication on the root user.Option B is the best practice for securing the root user:\1. Creating IAM users for daily administrative tasks allows the company to assign specific permissions and access levels to individual users, reducing the reliance on the powerful root user account.\2. Enabling multi-factor authentication (MFA) on the root user adds an extra layer of security. MFA requires an additional authentication factor, such as a physical token or a mobile app, in addition to the username and password.By following this approach, the company can improve the security of the AWS account by reducing the exposure and privileges of the root user.Here's why the other options are not the best fit for securing the root user:A. Creating IAM users for daily administrative tasks and disabling the root user: This option is a good practice, but disabling the root user entirely might cause challenges in case of emergency situations or certain administrative tasks that require root-level access.C. Generating an access key for the root user and using it for daily administration tasks: This option is not recommended because using access keys for regular administrative tasks can introduce security risks, as access keys can be compromised and may not provide the same level of security as IAM user credentials.D. Providing the root user credentials to a senior solutions architect for daily administration tasks: This option is not recommended as it goes against the principle of least privilege and increases the risk of unauthorized access or accidental actions.Therefore, the recommended solution for securing the root user of a newly provisioned AWS account is:B. Create IAM users for daily administrative tasks. Enable multi-factor authentication on the root user.