CLF-C02 AWS Certified Cloud Practitioner - Practice Questions

Question 10

Which actions are best practices for an AWS account root user? (Select TWO.)

Select all that apply, then click Submit answer.

○
Share root user credentials with team members.
○
Create multiple root users for the account, separated by environment.
○
Enable multi-factor authentication (MFA. on the root user.
○
Create an IAM user with administrator privileges for daily administrative tasks, instead of using the root user.
Use programmatic access instead of the root user and password.

Reference / correct answer:

Enable multi-factor authentication (MFA. on the root user.

Create an IAM user with administrator privileges for daily administrative tasks, instead of using the root user.
Use programmatic access instead of the root user and password.

The AWS account root user is the identity that has complete access to all AWS services and resources in the account. It is accessed by signing in with the email address and password that were used to create the account1. The root user should be protected and used only for a few account and service management tasks that require it1. Therefore, the following actions are best practices for an AWS

account root user:

Enable multi-factor authentication (MFA. on the root user. MFA is a security feature that requires users to provide two or more pieces of information to authenticate themselves, such as a password and a code from a device. MFA adds an extra layer of protection for the root user credentials, which can access sensitive information and perform critical operations in the account2.

Create an IAM user with administrator privileges for daily administrative tasks, instead of using the root user. IAM is a service that helps customers manage access to AWS resources for users and groups. Customers can create IAM users and assign them permissions to perform specific tasks on specific resources. Customers can also create IAM roles and policies to delegate access to other AWS services or external entities3. By creating an IAM user with administrator privileges, customers can avoid using the root user for everyday tasks and reduce the risk of accidental or malicious changes to the account1.

Question 11

A company is assessing its AWS Business Support plan to determine if the plan still meets the company’s needs. The company is considering

switching to AWS Enterprise Support.

Which additional benefit will the company receive with AWS Enterprise Support?

Select an option, then click Submit answer.

○
A full set of AWS Trusted Advisor checks
○
Phone, email, and chat access to cloud support engineers 24 hours a day, 7 days a week
○
A designated technical account manager (TAM) to assist in monitoring and optimization
○
A consultative review and architecture guidance for the company’s applications

Question 12

A company has a compliance requirement to record and evaluate configuration changes, as well as perform remediation actions on AWS resources.

Which AWS service should the company use?

Select an option, then click Submit answer.

○
AWS Config
○
AWS Secrets Manager
○
AWS CloudTrail
○
AWS Trusted Advisor

CLF-C02 – AWS Certified Cloud Practitioner