An External Auditor Finds That a Company's User Passwords Have

question 144

Multiple Choice

An external auditor finds that a company's user passwords have no minimum length. The company is currently using two identity providers: AWS IAM federated with on-premises Active Directory Amazon Cognito user pools to accessing an AWS Cloud application developed by the company Which combination of actions should the security engineer take to solve this issue? (Choose two.)

• A) Update the password length policy in the on-premises Active Directory configuration.
• B) Update the password length policy in the IAM configuration.
• C) Enforce an IAM policy in Amazon Cognito and AWS IAM with a minimum password length condition.
• D) Update the password length policy in the Amazon Cognito configuration.
• E) Create an SCP with AWS Organizations that enforces a minimum password length for AWS IAM and Amazon Cognito.

---

Definitions:

Mass Media

Channels of communication that are available to very wide segments of the population.

"Taking a Knee"

A form of protest, particularly in sports, where individuals kneel during the national anthem to call attention to social and political issues, such as racial injustice.

Cultural Capital

The social assets of a person (education, intellect, style of speech, dress, etc.) that promote social mobility in a stratified society.

Examples

Specific instances or cases used to illustrate a concept, principle, or method.