What are the most secure ways to protect the root user of a newly created AWS account? (Choose two.)
Choose an answer
Tap an option to check your answer.
Correct answer: Do not create access keys for the AWS account root user; create IAM users instead., Enable multi-factor authentication (MFA) for the AWS account root user..
Why this is the answer
The root user has unrestricted access to all resources in an AWS account. To protect it, you should avoid creating access keys for the root user. Instead, create IAM users with appropriate permissions and use those for daily operations. This follows the principle of least privilege. Additionally, enabling multi-factor authentication (MFA) for the root user adds an essential layer of security, requiring a
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed