AWS Certified Cloud Practitioner Certification - Part 35

1. Right Answer: B,C
Explanation: Your root account should always be protected by Multi-Factor Authentication (MFA). This additional layer of security helps protect against unauthorized logins to your account by requiring two factors: something you know (a password) and something you have (for example, an MFA device). AWS supports virtual and hardware MFA devices and U2F security keys.Cognito can be used as an Identity Provider (IdP), where it stores and maintains users and credentials securely for your applications, or it can be integrated with OpenID Connect, SAML, and other popular web identity providers like Amazon.com. Using Amazon Cognito, you can generate temporary access credentials for your clients to access AWS services, eliminating the need to store long-term credentials in client applications.https://aws.amazon.com/blogs/security/guidelines-for-protecting-your-aws-account-while-usingprogrammatic-access/

2. Right Answer: D
Explanation: To improve control over your AWS environment, you can use AWS Organizations to create groups of accounts, and then attach policies to a group to ensure the correct policies are applied across the accounts without requiring custom scripts and manual processes.https://aws.amazon.com/organizations/

3. Right Answer: B
Explanation: https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/ monitor_estimated_charges_with_cloudwatch.html

4. Right Answer: A
Explanation: You can use AWS Artifact Reports to download AWS security and compliance documents, such as AWS ISO certifications, Payment Card Industry (PCI), and System and Organization Control (SOC) reports.https://aws.amazon.com/artifact/faq/

5. Right Answer: A
Explanation: https://aws.amazon.com/premiumsupport/plans/