Multi-factor authentication setup in AWS - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is Multi-factor Authentication (MFA)?

MFA is a security method that requires users to provide two or more verification factors to gain access. It adds an extra layer of protection beyond just a password.

beginner

Name two common types of MFA devices used in AWS.

1. Virtual MFA devices (like smartphone apps such as Google Authenticator)<br>2. Hardware MFA devices (physical tokens that generate codes).

beginner

What AWS service allows you to enable MFA for IAM users?

AWS Identity and Access Management (IAM) lets you enable MFA for users to increase account security.

intermediate

Why is it important to enable MFA on the AWS root account?

The root account has full access to all resources. Enabling MFA protects it from unauthorized access, reducing risk of account compromise.

intermediate

Describe the basic steps to set up a virtual MFA device for an AWS IAM user.

1. Sign in to AWS Management Console as an IAM user or root user.<br>2. In the navigation bar of the console, choose your account name, then choose Security credentials.<br>3. Under Multi-factor authentication (MFA), choose Assign MFA device.<br>4. Select Virtual MFA device.<br>5. Use an authenticator app to scan the QR code.<br>6. Enter two consecutive MFA codes from the app.<br>7. Confirm to activate MFA.

What does MFA stand for in AWS security?

A Multi-factor Authentication

B Multiple File Access

C Managed Firewall Access

D Multi-file Authorization

MFA means Multi-factor Authentication, which adds extra verification steps for security.

Which AWS account should always have MFA enabled for best security?

A IAM user account

B Billing account

C Support account

D Root account

The root account has full control and must have MFA enabled to prevent unauthorized access.

Which of these is NOT a valid MFA device type in AWS?

A Virtual MFA device

B Biometric fingerprint scanner

C SMS text message MFA

D Hardware MFA device

AWS does not support biometric fingerprint scanners as MFA devices.

How many consecutive MFA codes must you enter when setting up a virtual MFA device in AWS?

A Three

B One

C Two

D Four

You enter two consecutive codes to verify the virtual MFA device is synced.

What AWS service do you use to manage MFA for users?

A AWS IAM

B AWS Lambda

C Amazon S3

D Amazon EC2

AWS IAM (Identity and Access Management) manages users and MFA settings.

Explain why enabling MFA is important for AWS account security.

Think about what happens if someone steals your password.

Describe the process to set up a virtual MFA device for an AWS IAM user.

Focus on the steps involving the AWS console and the authenticator app.