Human IAM users in the finance office sign into the AWS Management Console with passwords. Which additional authentication method best hardens those console sign-ins?
Select an answer to reveal the explanation.
Short Explanation
A password alone is one lock on the door; MFA adds a second factor — something you have, like a token or authenticator app. Even if the password leaks, the thief still needs that second factor to walk into the console.
Full Explanation
MFA requires a second authentication factor beyond the password when signing in to the AWS Management Console. It is a primary hardening control for human IAM users and the root user. Disabling logging or broadening admin rights weakens security rather than strengthening authentication.