A development team is developing a mobile-based application. They want to use AWS services for data storage and for managing authentication. It also needs to be ensured that a second level of authentication is available for users. Which of the following would assist in this? Choose 2 answers from the options given below.

Answer options:

A.Use the AWS Cognito Service.
B.Use the AWS Config Service.
C.Enable MFA for the underlying user pool.
D.Enable user names and passwords for the underlying user pools.

Answer – A and C
The AWS Documentation mentions the following.
Amazon Cognito provides authentication, authorization, and user management for your web and mobile apps. Your users can sign in directly with a user name and password or through a third party such as Facebook, Amazon, or Google.
Multi-factor authentication (MFA) increases security for your app by adding another authentication method and not relying solely on user name and password. You can choose to use SMS text messages or time-based one-time (TOTP) passwords as second factors in signing in to your users.
Option B is invalid since this is a configuration service.
Option D is invalid since user names and passwords is not a valid second level of authentication.
For more information on MFA with AWS Cognito, please refer to the below URL-
https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-mfa.html