How best can you prevent hackers from completely hijacking your account?

Your CTO is very worried about the security of your AWS account.

How best can you prevent hackers from completely hijacking your account?
A . Use short but complex password on the root account and any administrators.
B . Use AWS IAM Geo-Lock and disallow anyone from logging in except for in your city.
C . Use MFA on all users and accounts, especially on the root account.
D . Don’t write down or remember the root account password after creating the AWS account.

View Answer

Answer: C

Explanation:

Multi-factor authentication can add one more layer of security to your AWS account Even when you go to your Security Credentials dashboard one of the items is to enable MFA on your root account

Option A is invalid because you need to have a good password policy

Option B is invalid because there is no IAM Geo-Lock

Option D is invalid because this is not a recommended practices For more information on MFA, please visit the below URL http://docs.aws.amazon.com/IAM/latest/UserGuide/id credentials mfa.htmll

The correct answer is: Use MFA on all users and accounts, especially on the root account. Submit your Feedback/Queries to our Experts