Security & ComplianceQuestion 28 of 100
What is the AWS best practice for the root user of an AWS account?
a.Use it for all daily administrative tasks
b.Share its credentials with the whole team
c.Delete it immediately after account creation
d.Enable MFA on it and avoid using it for everyday tasks
Explanation
The root user has unrestricted access, so AWS recommends securing it with multi-factor authentication and using it only for the few tasks that require it. Everyday work should be done with IAM users or roles that follow least privilege.
Practice all 100 questions free — no signup required.
Related questions on this topic
- Under the AWS shared responsibility model, which of the following is AWS responsible for?
- Under the shared responsibility model, which task is the customer responsible for?
- Which AWS service is used to create users, groups, and roles and to control their permissions to AWS resources?
- Which security measure adds a second form of verification, such as a code from a device, when signing in to AWS?
- An application running on an EC2 instance needs to read objects from an S3 bucket. What is the recommended way to grant this access?
- Which principle recommends granting users only the permissions they need to perform their tasks and nothing more?
Last reviewed: · editorial process
PrepPass Editorial Team · Verified against AWS Certified Cloud Practitioner (CLF-C02) · How we review