Amazon Exam AWS-Security-Specialty Topic 5 Question 1 Discussion

Actual exam question for Amazon's AWS-Security-Specialty exam

Question #: 1
Topic #: 5

An application uses Amazon Cognito to manage end users' permissions when directly accessing AWS resources, including Amazon DynamoDB. A new feature request reads as follows:

Provide a mechanism to mark customers as suspended pending investigation or suspended permanently. Customers should still be able to log in when suspended, but should not be able to make changes.

The priorities are to reduce complexity and avoid potential for future security issues.

Which approach will meet these requirements and priorities?

ACreate a new database field ''suspended_status'' and modify the application logic to validate that field when processing requests.

BAdd suspended customers to second Cognito user pool and update the application login flow to check both user pools.

CUse Amazon Cognito Sync to push out a ''suspension_status'' parameter and split the lAM policy into normal users and suspended users.

DMove suspended customers to a second Cognito group and define an appropriate IAM access policy for the group.

Show Suggested Answer

Suggested Answer: A

by Ruthann at Dec 23, 2022, 10:00 PM

Limited Time Offer

25%

Off

Get Premium AWS-Security-Specialty Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!