What is the AWS recommended practice for the root user of an AWS account?
CLF-C02 2.2
- AUse it for all daily administration
- BEnable MFA and avoid using it for daily tasks✓
- CShare it with the operations team
- DDelete it after creating IAM users
Answer: B
Secure the root user with MFA and use IAM identities with least privilege for everyday work. The root user cannot be deleted.
Why the other options are wrong
- A. The root user has unrestricted access, so daily use increases blast radius.
- C. Credentials should never be shared; create individual identities.
- D. The root user is part of the account and cannot be deleted.
Terms in this question
Practice CLF-C02 with questions picked for you
Quizdi picks the next question from what you keep getting wrong, and shows an estimated score on the real exam scale.
Start freeAll of Security and Compliance — what the domain covers and what it is worth →
This question was written from the published exam objectives. It is not taken from a real exam — Quizdi does not reproduce exam content.