A Security Engineer Is Defining the Controls Required to Protect

question 118

Multiple Choice

A security engineer is defining the controls required to protect the AWS account root user credentials in an AWS Organizations hierarchy. The controls should also limit the impact in case these credentials have been compromised. Which combination of controls should the security engineer propose? (Choose three.)

• A) Apply the following SCP:
• B)
• C) Enable multi-factor authentication (MFA) for the root user.
• D) Set a strong randomized password and store it in a secure location.
• E) Create an access key ID and secret access key, and store them in a secure location.
• F) Apply the following permissions boundary to the root user:

---

Definitions:

Long Bonds

Bonds with a long duration to maturity, typically over 10 years, often associated with higher risk but higher yield.

Capital Gains Yield

The price appreciation component of the total return on an investment, calculated as the increase in the investment's price divided by its initial price.

Dividends

Profit distributions paid out to shareholders by a company.

Shares

Ownership units in a corporation, representing a portion of the company's capital.