Root user vs IAM user in AWS - Practice Questions

Challenge - 5 Problems

🧠 Conceptual

intermediate

Difference in Permissions Between Root User and IAM User

Which statement correctly describes the permission scope of the AWS root user compared to an IAM user?

A Both root user and IAM users have the same default permissions when created.

B IAM users have full access to all AWS services by default, while the root user has limited permissions.

C The root user has full unrestricted access to all AWS services and resources by default, while IAM users have permissions only as explicitly granted.

D The root user can only access billing information, while IAM users manage resources.

💡 Hint

Think about who created the AWS account and what control they have.

The root user is the original account owner with full access to all AWS services and resources. IAM users have no permissions unless assigned.

❓ security

intermediate

Best Practice for Using Root User

Which of the following is the best security practice regarding the AWS root user?

A Use the root user for daily administrative tasks to simplify management.

B Create IAM users with necessary permissions and avoid using the root user for everyday tasks.

C Disable the root user account to prevent any access.

D Share the root user credentials with all team members for easy access.

💡 Hint

Consider minimizing risk by limiting use of the most powerful account.

Using IAM users with specific permissions reduces risk. The root user should be reserved for tasks that require it and protected carefully.

❓ service_behavior

advanced

Root User Access to Billing Information

Which user type can access the AWS billing and account settings by default?

A Only the root user has access to billing and account settings by default.

B All IAM users have access to billing and account settings by default.

C Both root user and IAM users have billing access by default.

D Neither root user nor IAM users have billing access by default.

💡 Hint

Think about who owns the account and controls billing.

The root user owns the AWS account and has default access to billing and account settings. IAM users must be granted explicit permissions to view billing.

❓ Architecture

advanced

IAM User Permissions Scope

Which statement best describes how IAM user permissions are managed in AWS?

A IAM user permissions are granted through policies attached directly to the user or through groups and roles, and they are limited to what is explicitly allowed.

B IAM users automatically inherit all permissions from the root user.

C IAM users have full access to all AWS services unless explicitly denied.

D IAM user permissions cannot be changed once created.

💡 Hint

Consider how AWS controls access for different users.

IAM users get permissions from policies attached to them, their groups, or roles. They have no permissions by default and only what is explicitly allowed.

✅ Best Practice

expert

Securing the AWS Root User Account

Which of the following actions is the most effective way to secure the AWS root user account?

A Use the root user account password for all team members to ensure quick access.

B Create multiple root user accounts for redundancy.

C Disable MFA on the root user account to avoid login issues.

D Enable multi-factor authentication (MFA) on the root user account and store credentials securely offline.

💡 Hint

Think about adding extra layers of security to the most powerful account.

Enabling MFA adds a second step to login, making it much harder for attackers to access the root user. Sharing passwords or disabling MFA weakens security.