Exam AWS Certified Security - Specialty All Questions

View all questions & answers for the AWS Certified Security - Specialty exam

Exam AWS Certified Security - Specialty topic 1 question 115 discussion

Exam question from Amazon's AWS Certified Security - Specialty

Question #: 115
Topic #: 1

[All AWS Certified Security - Specialty Questions]

A Security Engineer is working with a Product team building a web application on AWS. The application uses Amazon S3 to host the static content, Amazon API
Gateway to provide RESTful services; and Amazon DynamoDB as the backend data store. The users already exist in a directory that is exposed through a SAML identity provider.
Which combination of the following actions should the Engineer take to enable users to be authenticated into the web application and call APIs? (Choose three.)

A. Create a custom authorization service using AWS Lambda.
B. Configure a SAML identity provider in Amazon Cognito to map attributes to the Amazon Cognito user pool attributes.
C. Configure the SAML identity provider to add the Amazon Cognito user pool as a relying party.
D. Configure an Amazon Cognito identity pool to integrate with social login providers.
E. Update DynamoDB to store the user email addresses and passwords.
F. Update API Gateway to use a COGNITO_USER_POOLS authorizer.

Show Suggested Answer

Suggested Answer: BCF 🗳️

by joeboy at March 13, 2020, 11:21 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

Raj9

Highly Voted 3 years, 9 months ago

bcf. This question is taken from aws exam blue print sample questions. question number 4

upvoted 34 times

...

PCH01

Highly Voted 3 years, 9 months ago

The clue is Cognito, there are 4 references to Cognito, 3 are correct(BCF), the other one talks about social login bullshit when the question have indicated existing directory users.

upvoted 16 times

...

Raphaello

Most Recent 1 year, 4 months ago

Selected Answer: BCF

Correct answers BCF

upvoted 1 times

...

Tofu13

2 years ago

Selected Answer: BCF

B https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-specifying-attribute-mapping.html C https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-saml-idp.html F https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-integrate-with-cognito.html

upvoted 1 times

...

Cyp

2 years, 3 months ago

Selected Answer: BCF

Ans BCF

upvoted 1 times

...

hubekpeter

2 years, 7 months ago

Selected Answer: BCF

https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-saml-idp.html

upvoted 3 times

...

MoreOps

3 years, 2 months ago

Selected Answer: BCF

BCF is what i would go with.

upvoted 2 times

...

Daniel76

3 years, 8 months ago

BCF F: COGNITO_USER_POOLS https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-enable-cognito-user-pool.html B: You must also configure your SAML identity provider to provide attributes values for any attributes required in your user pool. https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-integrating-3rd-party-saml-providers.html https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-specifying-attribute-mapping.html C: Relying party https://docs.amazonaws.cn/en_us/cognito/latest/developerguide/cognito-user-pools-saml-idp.html

upvoted 5 times

...