The correct choices are Enable multi-factor authentication for the AWS account root user and Create a long and complex password for the root user.

Enable multi-factor authentication for the AWS account root user provides an additional factor beyond the password so an attacker cannot access the account with the password alone. Create a long and complex password for the root user ensures the root credential has high entropy which reduces the chance of brute force or credential guessing attacks.

Use the root account only for tasks that strictly require it and then sign out and manage day to day access with IAM users and roles to follow the principle of least privilege.

Email the founder the root username and password for future troubleshooting is unsafe because email is not a secure channel and it creates persistent copies that increase the chance of compromise.

Generate root access keys and store them securely in AWS Secrets Manager is not recommended because AWS advises against creating root access keys and it is safer to avoid creating them at all.

Create root user access keys and share those keys only with the founder remains a bad practice because creating and sharing root keys increases the attack surface and prevents proper use of least privilege with IAM identities and roles.

Full AWS Practitioner Certification Question