Your company has defined privileged users for their AWS Account.
These users are administrators for key resources defined in the company.
There is now a mandate to enhance the security authentication for these users.
How can this be accomplished?
Click on the arrows to vote for the correct answer
A. B. C. D.Answer: A.
Option A is CORRECT as AWS recommends enabling MFA for privileged user accounts.
Refer to the following screenshot for more details.
Option B is incorrect as versioning is applicable in S3 and not for IAM privileged users.
Options C is incorrect as accidental deletion is available for S3 and EC2 services.
There is no such solution for IAM users.
Option D is incorrect as root users are different from privileged users.
The solution recommended does not work for privileged users.
For more information on IAM best practices, please visit the below URL:
https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.htmlThe correct answer to this question is A. Enable MFA for these user accounts.
Explanation:
Privileged users have access to key resources within the company's AWS account, making them valuable targets for attackers. Therefore, it is important to enhance the security authentication for these users.
Multi-factor authentication (MFA) is an additional layer of security that requires users to provide two or more forms of authentication before they can access their accounts. This adds an extra layer of security, making it more difficult for attackers to gain unauthorized access, even if they have compromised the user's password.
Enabling versioning (option B) does not enhance security authentication. It is a feature that allows users to keep multiple versions of an object in a bucket.
Enabling accidental deletion (option C) also does not enhance security authentication. It is a feature that helps prevent data loss by allowing users to recover objects that were deleted.
Disabling root access (option D) is a good security practice, but it does not specifically enhance security authentication for privileged users.
Therefore, the correct answer is to enable MFA for privileged user accounts. This is a critical step in securing the AWS account and protecting sensitive resources.