AWS - Identity and Access ManagementHow can you enforce multi-factor authentication (MFA) for IAM users to increase security?AEnable MFA on the AWS account root user onlyBCreate an IAM policy that denies all actions unless MFA is usedCUse AWS Config to monitor MFA usageDAttach a role with MFA permissions to usersCheck Answer
Step-by-Step SolutionSolution:Step 1: Understand how to enforce MFA in IAMYou can write IAM policies that require MFA authentication for sensitive actions.Step 2: Evaluate other optionsEnabling MFA only on root user is insufficient; AWS Config monitors but does not enforce; roles do not grant MFA.Final Answer:Create IAM policy denying actions without MFA -> Option BQuick Check:MFA enforcement via IAM policy [OK]Quick Trick: Use IAM policies to require MFA for actions [OK]Common Mistakes:MISTAKESThinking enabling MFA on root user covers all usersConfusing monitoring with enforcementAssuming roles grant MFA automatically
Master "Identity and Access Management" in AWS9 interactive learning modes - each teaches the same concept differentlyLearnWhyDeepVisualTryChallengeProjectRecallTime
More AWS Quizzes AWS Account and Billing - AWS Cost Explorer basics - Quiz 8hard AWS Account and Billing - Billing dashboard overview - Quiz 10medium AWS CLI - CLI output formats (json, table, text) - Quiz 1easy Cloud Computing Fundamentals - AWS global infrastructure (regions, AZs) - Quiz 2easy Cloud Computing Fundamentals - What is cloud computing - Quiz 6medium Cloud Computing Fundamentals - Edge locations and CloudFront overview - Quiz 1easy Identity and Access Management - Multi-factor authentication setup - Quiz 6medium S3 Fundamentals - Creating S3 buckets - Quiz 9hard Security Groups and Network ACLs - Why security groups matter - Quiz 13medium Security Groups and Network ACLs - Why security groups matter - Quiz 2easy