AWS Certified Developer – Associate (DVA-C02) — Question 80

A software company is launching a multimedia application. The application will allow guest users to access sample content before the users decide if they want to create an account to gain full access. The company wants to implement an authentication process that can identify users who have already created an account. The company also needs to keep track of the number of guest users who eventually create an account.

Which combination of steps will meet these requirements? (Choose two.)

Answer options

• A. Create an Amazon Cognito user pool. Configure the user pool to allow unauthenticated users. Exchange user tokens for temporary credentials that allow authenticated users to assume a role.
• B. Create an Amazon Cognito identity pool. Configure the identity pool to allow unauthenticated users. Exchange unique identity for temporary credentials that allow all users to assume a role.
• C. Create an Amazon CloudFront distribution. Configure the distribution to allow unauthenticated users. Exchange user tokens for temporary credentials that allow all users to assume a role.
• D. Create a role for authenticated users that allows access to all content. Create a role for unauthenticated users that allows access to only the sample content.
• E. Allow all users to access the sample content by default. Create a role for authenticated users that allows access to the other content.

Correct answer: B, D

Explanation

Option B is correct as it allows the application to recognize both authenticated and unauthenticated users while tracking their identities. Option D complements this by defining access levels for authenticated and unauthenticated users, ensuring guests can only see sample content. The other options do not provide the necessary user tracking or authentication mechanism required for the application's goals.