AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 213

Question

A security engineer discovers that a company’s user passwords have no required minimum length. The company is using the following two identity providers (IdPs): • AWS Identity and Access Management (IAM) federated with on-premises Active Directory • Amazon Cognito user pools that contain the user database for an AWS Cloud application that the company developed Which combination of actions should the security engineer take to implement a required minimum length for the passwords? (Choose two.)

Accepted Answer

Correct answer: B, C. The correct answer is B, C. Option B: Update the password length policy in the Cognito configuration. Option C: Update the password length policy in the on-premises Active Directory configuration Amazon Cognito manages user sign-up, sign-in and federated identity for applications. AWS Config tracks resource configuration changes and evaluates compliance.

AWS Certified Security - Specialty SCS-C02 — Question 213