AWS Certified Security - Specialty SCS-C02 — Question 27

• AUse the AWS account root user access keys instead of the AWS Management Console.
• BEnable multi-factor authentication for the AWS IAM users with the AdministratorAccess managed policy attached to them.
• CUse AWS KMS to encrypt all AWS account root user and AWS IAM access keys and set automatic rotation to 30 days.
• DDo not create access keys for the AWS account root user; instead, create AWS IAM users.
• EEnable multi-factor authentication for the AWS account root user.

Select 2 answers to reveal the result.