Exam AWS Certified Cloud Practitioner topic 1 question 963 discussion

C. Turn on multi-factor authentication (MFA) for added security during the login process. "With MFA, users have a device that generates a response to an authentication challenge. Each user's credentials and device-generated response are required to complete the sign-in process. " https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html#enable-mfa-for-privileged-users:~:text=With%20MFA%2C%20users%20have%20a%20device%20that%20generates%20a%20response%20to%20an%20authentication%20challenge.%20Each%20user%27s%20credentials%20and%20device%2Dgenerated%20response%20are%20required%20to%20complete%20the%20sign%2Din%20process

https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html

Answer: C

The recommendation that complies with IAM security best practices is: C. Turn on multi-factor authentication (MFA) for added security during the login process. Enabling MFA adds an extra layer of security to the IAM user accounts by requiring an additional authentication factor, such as a unique code from a mobile device, in addition to the regular username and password. This helps protect against unauthorized access even if the username and password are compromised.