Which practice is a key foundational control for protecting the AWS account root user for a municipal account?
Select an answer to reveal the explanation.
Short Explanation
MFA on root is like needing both the key and the second token before the master lock turns — a simple, high-value protection. Wiki passwords, root access keys in apps, and blindfolding CloudTrail all make the master key easier to abuse.
Full Explanation
Enabling MFA on the root user is a core recommended protection because root can perform highly privileged account actions. Publishing root passwords, creating and embedding long-lived root access keys, or disabling auditing increase exposure rather than reducing it. MFA is therefore a foundational root-protection practice for CLF-C02 depth.