Exam AWS Certified Developer Associate topic 1 question 299 discussion

Exam question from Amazon's AWS Certified Developer Associate

Question #: 299
Topic #: 1

[All AWS Certified Developer Associate Questions]

An application receives authenticated user data in the form of a JSON Web Token (JWT) from an Amazon Cognito user pool. A developer is setting up an Amazon API Gateway API to handle requests from the application and is using the token to verify the user’s identity.

Which of the following must the developer validate before the user data can be trusted?

A. The token’s nonce
B. The key ID in the token’s header
C. The token's signature
D. The token's issuer claim

Show Suggested Answer

Suggested Answer: C 🗳️

by k1kavi1 at Nov. 26, 2022, 2:01 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

a15ce96

1 year, 3 months ago

Selected Answer: C

Before actually trusting the token's data, we first need to verify whether the token was tampered or not.

upvoted 1 times

...

rcaliandro

2 years ago

Selected Answer: C

First of all the API must validate the signature of the token, C is the correct option

upvoted 1 times

...

Ankit1010

2 years, 4 months ago

C When using a JSON Web Token (JWT) obtained from an Amazon Cognito user pool to verify a user's identity in an Amazon API Gateway API, the developer must validate the token's signature to ensure that the token has not been tampered with.

upvoted 1 times

...

michaldavid

2 years, 7 months ago

Selected Answer: C

Agree with C

upvoted 2 times

...

k1kavi1

2 years, 7 months ago

Selected Answer: C

https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-using-tokens-verifying-a-jwt.html#amazon-cognito-user-pools-using-tokens-step-2

upvoted 2 times

...