Which statement correctly describes root-user responsibilities at Cloud Practitioner depth for a city AWS account?
Select an answer to reveal the explanation.
Short Explanation
Root is the master key to the whole account — you keep it locked away and only bring it out for rare account-level jobs like closing the account or certain account settings. Day-to-day work should use IAM users or roles, not root.
Full Explanation
The AWS account root user has unrestricted account privileges and is required for a small set of account-level actions (for example, closing the account or changing certain account settings). Best practice is to protect root, enable MFA, avoid root access keys, and perform daily operations with IAM identities under least privilege.