Bird
0
0

How can you enforce multi-factor authentication (MFA) for IAM users to increase security?

hard📝 Application Q9 of 15
AWS - Identity and Access Management
How can you enforce multi-factor authentication (MFA) for IAM users to increase security?
AEnable MFA on the AWS account root user only
BCreate an IAM policy that denies all actions unless MFA is used
CUse AWS Config to monitor MFA usage
DAttach a role with MFA permissions to users
Step-by-Step Solution
Solution:
  1. Step 1: Understand how to enforce MFA in IAM

    You can write IAM policies that require MFA authentication for sensitive actions.
  2. Step 2: Evaluate other options

    Enabling MFA only on root user is insufficient; AWS Config monitors but does not enforce; roles do not grant MFA.
  3. Final Answer:

    Create IAM policy denying actions without MFA -> Option B
  4. Quick Check:

    MFA enforcement via IAM policy [OK]
Quick Trick: Use IAM policies to require MFA for actions [OK]
Common Mistakes:
MISTAKES
  • Thinking enabling MFA on root user covers all users
  • Confusing monitoring with enforcement
  • Assuming roles grant MFA automatically

Want More Practice?

15+ quiz questions · All difficulty levels · Free

Free Signup - Practice All Questions
More AWS Quizzes