Cert Master

SCS-C02 Domain 3: Identity and Access Management

Which service should you use to enforce MFA for console users?

Multiple choice — select one answer

Answer choices

  1. a. IAM MFA policies
  2. b. Lambda rotation or eliminate keys with roles
  3. c. Access Analyzer
  4. d. IAM Identity Center with external IdP

Architectural breakdown & explanation

MFA reduces account takeover risk.

Correct answer(s): a. IAM MFA policies

Exam domain: Domain 3: Identity and Access Management (20% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified Security – Specialty bank. Run a full timed practice exam with domain-weighted random questions in your browser.

Start practice exam View exam overview All certifications