Q3 — AWS SOA-C02 Ch.1

Question 3 of 100 | ← Chapter 1

A company creates a new member account by using AWS Organizations. A SysOps administrator needs to add AWS Business Support to the new account. Which combination of steps must the SysOps administrator take to meet this requirement? (Choose two.)

• A. Sign in to the new account by using IAM credentials. Change the support plan.
• B. Sign in to the new account by using root user credentials. Change the support plan. ✓
• C. Use the AWS Support API to change the support plan.
• D. Reset the password of the account root user. ✓
• E. Create an IAM user that has administrator privileges in the new account.

Correct Answer: B. Sign in to the new account by using root user credentials. Change the support plan., D. Reset the password of the account root user.

Explanation

AWS Organizations创建新账户时，初始根用户密码不可用，需通过访问控制权限处理。AWS支持计划变更需根用户或具备Support权限的IAM用户操作。选项A中IAM用户需具备相应权限，但新账户默认无IAM用户，需先执行选项E创建具备管理员权限的IAM。选项B需要根用户凭证，但新账户需重置密码（选项D未选）。选项C的Support API需特定权限。综合最佳实践，创建IAM用户并登录修改更为可行。AWS文档指出IAM用户需激活Support权限，管理员权限通常包含此权限。