Discuss Amazon CLF-C02 Exam Topic 1 Question 1

Which actions are best practices for an AWS account root user? (Select TWO.)

AShare root user credentials with team members.

BCreate multiple root users for the account, separated by environment.

CEnable multi-factor authentication (MFA) on the root user.

DCreate an IAM user with administrator privileges for daily administrative tasks, instead of using the root user.
Use programmatic access instead of the root user and password.

Suggested Answer: C, D

The AWS account root user is the identity that has complete access to all AWS services and resources in the account.It is accessed by signing in with the email address and password that were used to create the account1.The root user should be protected and used only for a few account and service management tasks that require it1. Therefore, the following actions are best practices for an AWS account root user:

Enable multi-factor authentication (MFA) on the root user. MFA is a security feature that requires users to provide two or more pieces of information to authenticate themselves, such as a password and a code from a device.MFA adds an extra layer of protection for the root user credentials, which can access sensitive information and perform critical operations in the account2.

Create an IAM user with administrator privileges for daily administrative tasks, instead of using the root user. IAM is a service that helps customers manage access to AWS resources for users and groups. Customers can create IAM users and assign them permissions to perform specific tasks on specific resources.Customers can also create IAM roles and policies to delegate access to other AWS services or external entities3.By creating an IAM user with administrator privileges, customers can avoid using the root user for everyday tasks and reduce the risk of accidental or malicious changes to the account1.

Get Premium CLF-C02 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

18 comments · newest first

Nikita 11 months ago

Agreed, but isn't it a bit overkill to avoid using root?

Gianna 11 months ago

I thought you could have multiple root users?

Van 11 months ago

Wait, people still share root credentials? That's risky!

Curtis 12 months ago

Definitely create an IAM user for daily tasks.

Luisa 12 months ago

MFA on the root user is a must!

Hershel 1 year ago

I practiced a question similar to this, and I remember that using IAM users is emphasized a lot. So, I’d go with D for sure, but I’m still a bit shaky on the specifics of option C.

Mozell 1 year ago

I feel like sharing root user credentials is a big no-no, but I can't recall if creating multiple root users is allowed. I think it might not be a good idea either way.

Oliva 1 year ago

I’m not entirely sure, but I think creating an IAM user for daily tasks instead of using the root user is also a best practice. It seems safer to limit root access.

Pamella 1 year ago

I remember that enabling multi-factor authentication (MFA) for the root user is really important for security, so I think option C is definitely one of the best practices.

Jacquline 1 year ago

Sharing root user credentials is definitely not a best practice. I'll be sure to avoid that one.

Huey 1 year ago

Ah, I see. Enabling MFA on the root user is a must, and creating separate IAM users is also a good practice. I've got a good strategy for this now.

Zona 1 year ago

Okay, I think I've got this. The key is to minimize the use of the root user and instead create an IAM user with admin privileges for daily tasks.

Gladis 1 year ago

Hmm, I'm a bit confused on the difference between the root user and IAM users. I'll need to review that before answering.

Justine 1 year ago

This one seems pretty straightforward. I'll focus on the best practices for the root user.

Monroe 1 year ago

Okay, let me see... Clustered Base Tables, that sounds like it could be related to data storage and organization. I'll try to recall what I know about that.

Stephane 1 year ago

This one looks straightforward - the key is to focus on the "valuation technique" part of the question and remember that fair value is consistent with the market, income, and risk approach.

Leah 1 year ago

I'm a bit confused by the options. Can rainbow tables and hybrid attacks also involve using a list of common passwords? I'll need to review those concepts.

Tasia 1 year ago

This question is asking about how to defeat a network-based IDS, but it's important to remember that we shouldn't actually try to attack or bypass security measures. I'll think through the options carefully.

Amazon CLF-C02 Exam - Topic 1 Question 1 Discussion