MFA (multi-factor authentication) quiz · Level 0

Question 1Todo.io wants every member of staff to use MFA when they sign in to AWS. Staff sign in through IAM Identity Center. Where should MFA be required?

In IAM Identity Center's sign-in settings, for all of its users.Correct. Staff sign in to AWS in one place, so MFA is required in one place.On the root user of each account.Not this one. Root needs MFA too, but that does nothing for staff signing in.On an IAM user in each account.Not this one. Staff don't have IAM users; they sign in through Identity Center.Nowhere, as long as passwords are long.Not this one. A long password can still be phished. MFA means a stolen password alone isn't enough.

Learn it: MFA (multi-factor authentication)

Question 2What does "MFA (multi-factor authentication)" mean?

A second proof of identity, like a code from an app or a security key, on top of a password.Correct. Think of it as: A PIN on top of the key card.The identity you sign in as with the account's email address. It can do almost anything; only an SCP can limit it.Not this one. That describes Root user.Groups many AWS accounts under one management account, with one bill and shared guardrails.Not this one. That describes AWS Organizations.A container for AWS resources, with its own identities and its own bill.Not this one. That describes AWS account.

Learn it: MFA (multi-factor authentication)

Question 3Which term is this? "A second proof of identity, like a code from an app or a security key, on top of a password."

MFA (multi-factor authentication)Correct. Yes. Think of it as: A PIN on top of the key card.Root userNot this one. Root user is: The identity you sign in as with the account's email address. It can do almost anything; only an SCP can limit it.AWS OrganizationsNot this one. AWS Organizations is: Groups many AWS accounts under one management account, with one bill and shared guardrails.AWS accountNot this one. AWS account is: A container for AWS resources, with its own identities and its own bill.

Learn it: MFA (multi-factor authentication)

Question 4Which AWS term is described by this analogy? "A PIN on top of the key card."

MFA (multi-factor authentication)Correct. Yes: A second proof of identity, like a code from an app or a security key, on top of a password.Root userNot this one. Root user is: The identity you sign in as with the account's email address. It can do almost anything; only an SCP can limit it. Its analogy: The master key to the whole building.AWS OrganizationsNot this one. AWS Organizations is: Groups many AWS accounts under one management account, with one bill and shared guardrails. Its analogy: The building management company that owns every flat.AWS accountNot this one. AWS account is: A container for AWS resources, with its own identities and its own bill. Its analogy: A flat in an apartment building. Separate locks, separate meter.

Learn it: MFA (multi-factor authentication)

MFA (multi-factor authentication)

Worth another look

Your weak spots

Services

Concepts