Which combination of measures best protects highly privileged IAM users according to AWS best practices?
A.Enable MFA and apply least-privilege policies
Correct. MFA plus least privilege is the core AWS identity hardening guidance.
B.Rotate access keys every 5 years and share credentials across the team
Shared credentials destroy accountability; rotation alone does not limit excessive permissions.
C.Use the root user for daily administration to avoid IAM complexity
The root user should be locked away and protected with MFA, not used daily.
D.Store credentials in a private GitHub repository
Secrets in repositories are a leading cause of account compromise.
Why this answer
AWS recommends enabling MFA for all privileged users and applying least-privilege permissions. The root user should only be used for tasks that require it, credentials should never be shared, and secrets must never be committed to source control.
Correct answer: A · Last reviewed 2026-10-25
Official AWS references
Practice this interactively
Answer without seeing the solution first in the IAM & Access Control practice session.
Practice IAM & Access Control