AWS Certified SysOps Administrator SOA-C01 – Question469

Which of the following statements is true of IAM?

A.
If you are configuring MFA for a user who will use a smartphone to generate an OTP, you must have the smartphone available in order to finish the wizard.
B. If you are configuring MFA for a user who will use a smartphone to generate an OTP, the smartphone is not required in order to finish the wizard.
C. If you are configuring MFA for a user who will use a smartphone to generate an OTP, you can finish the wizard on any device and later use the smartphone for authentication.
D. None of these are correct.

Correct Answer: A

Explanation:

Explanation: MFA can be used either with a specific MFA-enabled device or by installing an application on a smartphone. If a user chooses to use her smartphone, physical access to the device is required in or-der to complete the configuration wizard. Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/GenerateMFAConfig.html