Question 1,376 of 724
DVA-C02 Security Practice Question
A developer is creating a web application that uses Amazon Cognito for user authentication. The application needs to verify the identity of users before allowing access to the API. Which Cognito feature should the developer use?
⚠ Common exam trap
Watch out — candidates often confuse Identity Pools (which grant AWS credentials) with User Pools (which authenticate users), leading candidates to select Identity Pools when the question explicitly asks about verifying user identity, not granting AWS resource access.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
User Pools
Amazon Cognito User Pools provide a fully managed identity and access management service specifically designed for user authentication and authorization in web and mobile applications. They handle user sign-up, sign-in, and identity verification through features like multi-factor authentication (MFA) and JSON Web Token (JWT) issuance, making them the correct choice for verifying user identity before granting API access.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
User Pools
Why this is correct
Amazon Cognito User Pools serve as a secure, scalable user directory that handles user registration, authentication, and account recovery for web and mobile applications. They manage user identities, issue JSON Web Tokens (JWTs) upon successful authentication, including ID, access, and refresh tokens, which are then used to authorize access to application APIs. This service is the primary component for directly authenticating users into your application, making it the correct choice for managing user sign-in.
- ✗
Identity Pools
Why it's wrong here
Amazon Cognito Identity Pools (federated identities) provide temporary, limited-privilege AWS credentials to users who have been authenticated by a User Pool or other identity providers like Google or Facebook. Their primary function is to authorize access to AWS services such as S3, DynamoDB, or Lambda, by exchanging an identity token for an AWS STS session. Identity Pools do not perform user authentication themselves but rather facilitate secure access to AWS resources for authenticated users.
- ✗
Cognito Sync
Why it's wrong here
Amazon Cognito Sync is a service designed to synchronize user profile data and application-specific preferences across multiple devices for a single user. It allows developers to store and retrieve key-value pairs of user data, ensuring a consistent user experience regardless of the device being used. While it enhances the user experience by maintaining state, Cognito Sync is a data synchronization solution and does not participate in the user authentication flow.
- ✗
Cognito Events
Why it's wrong here
Cognito Events, primarily implemented through Lambda triggers, allow developers to customize the authentication and user management workflows within a Cognito User Pool. These triggers enable custom logic to be executed at various points in the user lifecycle, such as pre-sign-up validation, post-confirmation actions, or custom message sending. While crucial for extending Cognito's functionality, these events are hooks for custom code, not the core service responsible for authenticating users into an application.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Last reviewed: Jun 11, 2026
This DVA-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DVA-C02 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.