本番形式の問題を解き、 迷ったらその場で質問

Creating IAM users for daily admin tasks is correct, but “disable the root user” is not possible in AWS. The root user always exists and retains full privileges. Trap: It may look plausible because it mentions a related AWS feature, but the scenario is about root user security baseline.

Generating an access key for the root user and using it for daily tasks is explicitly discouraged by AWS. Root access keys provide long-lived programmatic access with unlimited permissions, increasing the likelihood and impact of credential leakage. Trap: It may look plausible because it mentions a related AWS feature, but the scenario is about root user security baseline.

Sharing root credentials for daily administration is a major security anti-pattern. It prevents accountability (no individual attribution in CloudTrail), increases the chance of accidental misuse, and expands the blast radius if the credentials are exposed. Trap: It may look plausible because it mentions a related AWS feature, but the scenario is about root user security baseline.