SAA-C03 Q279 · Security

Question

The lead member of a DevOps team creates an AWS account. A DevOps engineer shares the account credentials with a solutions architect through a password manager application. The solutions architect needs to secure the root user for the new account. Which actions will meet this requirement? (Select TWO)

Accepted Answer

The question scenario is critical: **root user credentials were shared** through a password manager, meaning multiple people know the password. Securing the root user requires two immediate actions:

**A. Update the root user password:**
- The original password was created by the DevOps lead and shared with others. This violates the principle of least privilege and credential hygiene.
- Changing the password to a new, strong one immediately **invalidates the shared credential**, ensuring only the person who changed it knows the new password.
- AWS recommends using a long, complex password unique to the AWS account.

**B. Enable MFA on the root user:**
- Multi-factor authentication adds a **second layer of defense** beyond the password.
- Even if the new password were somehow compromised, a

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

⚙️ Operations

🔒 Security

🎯 Exam Tips