A security engineer is attempting to assign a virtual multi-factor authentication (MFA) device to an IAM user whose current virtual MFA device is faulty. The security engineer receives an error message that indicates that the security engineer is not authorized to perform iam:DeleteVirtualMFADevice. The IAM role that the security engineer is using has the correct permissions to delete, list, and create a virtual MFA device. The IAM user also has permissions to delete their own virtual MFA device, but only if the IAM user is authenticated with MFA. What should the security engineer do to resolve this issue?

Topic #: - All AWS Certified Security - Specialty Questions

A. Modify the policy for the IAM user to allow the IAM user to delete the virtual MFA device without using MFA authentication.
B. Sign in as the AWS account root user. Modify the MFA device by using the IAM console to generate a new synchronization quick response (QR) code.
C. Use the AWS CLI or AWS API to find the ARN of the virtual MFA device and to delete the device. Most Voted
D. Sign in as the AWS account root user. Delete the virtual MFA device by using the IAM console.

- Awsexamhub website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Suggested Answer:

Reference Material:

Suggested Answer:

Reference Material:

Share this post

Join the Discussion