Bird
0
0

Why does AWS recommend enabling MFA on the root account even if IAM users have MFA enabled?

hard📝 Conceptual Q10 of 15
AWS - Identity and Access Management
Why does AWS recommend enabling MFA on the root account even if IAM users have MFA enabled?
ABecause MFA on the root account speeds up AWS service provisioning.
BBecause MFA on IAM users automatically disables root account access.
CBecause the root account has unrestricted access and MFA protects it from unauthorized use.
DBecause MFA on the root account is required to create IAM users.
Step-by-Step Solution
Solution:
  1. Step 1: Understand root account privileges

    The root account has full unrestricted access to all AWS resources.
  2. Step 2: Recognize importance of protecting root

    Enabling MFA on root prevents unauthorized full control even if password is compromised.
  3. Final Answer:

    Because the root account has unrestricted access and MFA protects it from unauthorized use. -> Option C
  4. Quick Check:

    Root account MFA = critical for full access protection [OK]
Quick Trick: Always protect root account with MFA for full security [OK]
Common Mistakes:
  • Thinking IAM MFA disables root access
  • Assuming MFA speeds provisioning
  • Believing root MFA is required to create users

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More AWS Quizzes