Why does AWS recommend enabling multi-factor authentication (MFA) on the root user and privileged IAM users?
A.It speeds up API calls
MFA is about authentication security, not performance.
B.It adds a second proof of identity beyond a password
Correct. Two-factor proof dramatically reduces account-takeover risk.
C.It encrypts all data in the account automatically
MFA doesn't encrypt data; that's KMS/encryption services.
D.It is required to create an AWS account
MFA is recommended but not mandatory for account creation.
Why this answer
MFA requires a second factor (hardware token, authenticator app) in addition to a password — so a stolen password alone can't compromise the account. It's the single most effective account hardening step.
Correct answer: B · Last reviewed 2026-10-26
Official AWS references
Practice this interactively
Answer without seeing the solution first in the Security Basics practice session.
Practice Security Basics