A company’s SysOps administrator needs to change the AWS Support plan for one of the company’s AWS accounts.The account has multi-factor authentication (MFA) activated, and the MFA device is lost.
What should the SysOps administrator do to sign in?
Sign in as a root user by using email and phone verification. Set up a new MFA device. Change the root user password.
Sign in as an IAM user with administrator permissions. Resynchronize the MFA token by using the IAM console.
Sign in as an IAM user with administrator permissions. Reset the MFA device for the root user by adding a new device.
Use the forgot-password process to verify the email address. Set up a new password and MFA device.
In my opinion, the answer is:
Sign in as a root user by using email and phone verification. Set up a new MFA device. Change the root user password.