CLF-C02 practice question: Protecting the root user (2 of 2)
Security and Compliance A free question from our original CLF-C02 practice exam. Try it, then open the answer to see why each option is right or wrong.
A company is shutting down a standalone AWS account that is not part of AWS Organizations.
Its administrators use their IAM identities for everything else.
Which task can be done only by signing in as the root user?
Choose one answer.
AA. Changing the account name in the account settings
BB. Closing this standalone AWS account, which ends its services
CC. Creating an IAM user with administrator permissions
DD. Updating the alternate billing and security contacts
Show the answer and explanation
Answer: B
A. Wrong: AWS does not require root user credentials to change the account name. Other account settings, such as the name and contacts, can be changed without them.
C. Wrong: An IAM identity with the right permissions can create IAM users. Root user credentials are not needed for this.
D. Wrong: AWS lists alternate contacts among the settings that do not require root user credentials. They can be updated without root.
Explanation
For a standalone account outside AWS Organizations, closing the account requires root user credentials. Renaming the account, updating alternate contacts and creating IAM users do not need the root user, so the root user should be used only for the few tasks that require it.
Want more on Protecting the root user? The 5 full-length practice sets have 10 more Protecting the root user questions, 325 in all, none of them in the free exam. One payment of $14.99, no subscription. See the practice sets →