MFA & Reporting With IAM Lab

Question 1

Through which ways can you enable MFA?

Answer 1

Command line

Console

Question 2

True or False: MFA can only be enabled on non-root accounts?

Answer 2

False: MFA Can (and should) be enabled on both root and non-root accounts.

Question 3

Which AWS service would you use to enforce MFA across all users?

Answer 3

STS. Security Token Service

Question 4

True or False: Reports are available on a per account basis for who’s using MFA or not?

Answer 4

True.