AWS Certified Cloud Practitioner (CLF-C02) — Question 61

A company is setting up AWS Identity and Access Management (IAM) on an AWS account.
Which recommendation complies with IAM security best practices?

Answer options

• A. Use the account root user access keys for administrative tasks.
• B. Grant broad permissions so that all company employees can access the resources they need.
• C. Turn on multi-factor authentication (MFA) for added security during the login process.
• D. Avoid rotating credentials to prevent issues in production applications.

Correct answer: C

Explanation

Enabling multi-factor authentication (MFA) significantly enhances security by requiring an additional verification step, making unauthorized access more difficult. Using the root user access keys (A) poses a security risk, while granting broad permissions (B) violates the principle of least privilege. Finally, not rotating credentials (D) can lead to security vulnerabilities as old credentials may be compromised.