A Company Has Mandated the Use of Multi-Factor Authentication (MFA)

question 687

Multiple Choice

A company has mandated the use of multi-factor authentication (MFA) for all IAM users, and requires users to make all API-calls using the CLI. However, users are not prompted to enter MFA tokens, and are able to run CLI commands without MFA. In an attempt to enforce MFA, the company attached an IAM policy to all users that denies API calls that have not been authenticated with MFA. What additional step must be taken to ensure that API calls are authenticated using MFA?

• A) Enable MFA on IAM roles, and require IAM users to use role credentials to sign API calls.
• B) Ask the IAM users to log into the AWS Management Console with MFA before making API calls using the CLI.
• C) Restrict the IAM users to use of the console, as MFA is not supported for CLI use.
• D) Require users to use temporary credentials from the get-session token command to sign API calls.

---

Definitions:

New Products

Items that have been introduced to a market for the first time or significantly improved in terms of technology, composition, or usability.

Indirect Activity

Activities that support the production process but do not directly contribute to the final product or service.

Human Resources

The department within an organization dealing with the recruitment, administration, and training of employees, as well as other personnel-related activities.

Value Chain

A series of activities and processes that a company performs to bring a product or service from conception to delivery to the end consumer, adding value at each step.