Bird
0
0

You want to enforce MFA for all IAM users accessing the AWS Management Console but allow programmatic access without MFA. How should you configure the IAM policy?

hard📝 Architecture Q8 of 15
AWS - Identity and Access Management
You want to enforce MFA for all IAM users accessing the AWS Management Console but allow programmatic access without MFA. How should you configure the IAM policy?
ARequire MFA for all actions regardless of access method.
BCreate a policy that requires MFA only for console login actions and attach it to all users.
CDisable MFA enforcement and rely on strong passwords.
DAttach a policy that requires MFA only for API calls.
Step-by-Step Solution
Solution:

  1. Step 1: Understand access types

    Console login and programmatic access use different actions in IAM policies.

  2. Step 2: Configure policy for console only

    Require MFA only for console login actions to allow programmatic access without MFA.

  3. Final Answer:

    Create a policy that requires MFA only for console login actions and attach it to all users. -> Option B

  4. Quick Check:

    MFA for console only = policy targets console login actions [OK]
Quick Trick: Target MFA requirement to console login actions only [OK]
Common Mistakes:
  • Requiring MFA for all actions
  • Disabling MFA enforcement
  • Applying MFA only to API calls

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More AWS Quizzes
AWS Account and Billing - Setting up billing alerts - Quiz 10hard AWS Account and Billing - Root user vs IAM user - Quiz 12easy AWS CLI - CLI scripting basics - Quiz 3easy Cloud Computing Fundamentals - Cloud deployment models (public, private, hybrid) - Quiz 13medium EC2 Fundamentals - Instance states (running, stopped, terminated) - Quiz 7medium Identity and Access Management - Least privilege principle - Quiz 3easy Identity and Access Management - IAM users and groups - Quiz 2easy Security Groups and Network ACLs - Security group as virtual firewall - Quiz 12easy VPC Fundamentals - Creating a custom VPC - Quiz 1easy VPC Fundamentals - Creating a custom VPC - Quiz 6medium