A Security Administrator Is Restricting the Capabilities of Company Root

question 247

Multiple Choice

A Security Administrator is restricting the capabilities of company root user accounts. The company uses AWS Organizations and has enabled it for all feature sets, including consolidates billing. The top-level account is used for billing and administrative purposes, not for operational AWS resource purposes. How can the Administrator restrict usage of member root user accounts across the organization?

• A) Disable the use of the root user account at the organizational root. Enable multi-factor authentication of the root user account for each organizational member account.
• B) Configure IAM user policies to restrict root account capabilities for each Organizations member account.
• C) Create an organizational unit (OU) in Organizations with a service control policy that controls usage of the root user. Add all operational accounts to the new OU.
• D) Configure AWS CloudTrail to integrate with Amazon CloudWatch Logs and then create a metric filter for RootAccountUsage . Configure AWS CloudTrail to integrate with Amazon CloudWatch Logs and then create a metric filter for RootAccountUsage .

---

Definitions:

Evangelical Denominations

Groups within Christianity characterized by a strong emphasis on the authority of the Bible, the significance of Jesus' death and resurrection, and the imperative of evangelism and conversion.

African Religious Beliefs

Encompass a wide range of traditional religious practices and beliefs in Africa, which include worship of ancestors, spirit worship, and the belief in a supreme being or beings, varying greatly across different cultures and regions.

Suffrage

The right to vote in public, political elections.

Disenfranchised

Refers to individuals who have been deprived of the right to vote or other rights of citizenship, often as a result of discriminatory laws or practices.