AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 150

Question

A company in France uses Amazon Cognito with the Cognito Hosted UI as an identity broker for sign-in and sign-up processes. The company is marketing an application and expects that all the application’s users will come from France. When the company launches the application, the company’s security team observes fraudulent sign-ups for the application. Most of the fraudulent registrations are from users outside of France. The security team needs a solution to perform custom validation at sign-up. Based on the results of the validation, the solution must accept or deny the registration request. Which combination of steps will meet these requirements? (Choose two.)

Accepted Answer

Correct answer: A, B. The correct answer is A, B. Option A: Create a pre sign-up AWS Lambda trigger. Associate the Amazon Cognito function with the Amazon Cognito user pool. Option B: Use a geographic match rule statement to configure an AWS WAF web ACL Associate the web ACL with the Amazon Cognito user pool. AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon Cognito manages user sign-up, sign-in and federated identity for applications. AWS WAF protects web applications from common exploits and malicious requests.

AWS Certified Security - Specialty SCS-C02 — Question 150