Q25 — AWS SAA-C03 Ch.15

Question 25 of 100 | ← Chapter 15

Q1125. A company creates a new AWS account. The company wants to use multi-factor authentication (MFA) to secure root user access to the account.Which types of MFA can the company use to meet this requirement?(Select THREE.)

Correct Answer: A. Passkeys and security keys, B. Virtual authenticator applications, D. Hardware time-based one-time password (TOTP) token devices

Explanation

To secure root user access to an AWS account using multi-factor authentication (MFA), the company can use the following types of MFA:A. Passkeys and security keysB. Virtual authenticator applicationsD. Hardware time-based one-time password (TOTP) token devicesExplanation:A. Passkeys and security keys: These are hardware devices that can be used for MFA, providing an additional layer of security.B. Virtual authenticator applications: Applications like Google Authenticator or Authy can generate time- based one-time passwords (TOTPs) for MFA, making them a popular choice for securing AWS accounts. D. Hardware time-based one-time password (TOTP) token devices: Physical TOTP devices generate one- time passwords that can be used for MFA, enhancing security for root user access.Why Other Options Are Not Suitable:C. Access key pairs: Access key pairs are used for API access and are not a form of MFA. E. Windows Hello: While it provides strong authentication on Windows devices, it is not directly applicable for AWS root user MFA.F. Certificate-based authentication: This method is used for securing communications and does not serve as a form of MFA for user access.Thus, the correct options for MFA types that can be used are A, B, and D.