AWS Certified Solutions Architect Associate SAA-C03 Practice Question

Enabling multi-factor authentication (MFA) for privileged accounts enhances security by requiring users to provide additional verification beyond just a password. This verification can be something you know (e.g. SMS code), something you have (e.g. access token), something you are (e.g. fingerprint). This reduces the risk of unauthorized access even if passwords are compromised. Storing access keys in plaintext, even in encrypted volumes, is not secure because it can lead to exposure of credentials if the volume content is exposed. Implementing protection against DDoS attacks helps with availability but does not prevent unauthorized access to accounts. Activating logging of API calls helps with auditing and monitoring but is irrelevant as to prevent unauthorized access.