You have implemented AWS Cognito services to require users to sign in and sign up to your app through social identity providers like Facebook, Google, etc. Your marketing department wants users to anonymously try out the app because the current log-in requirement is excessive, which may reduce the demand for products and services offered through the app. What would you suggest to the marketing department in this regard?

Answer options:

A.It’s too much of a security risk to allow unauthenticated users access to the app.
B.Cognito Identity supports guest users for the ability to enter the app and have limited access.
C.A second version of the app will need to be offered for unauthenticated users.
D.This is possible only if we remove the authentication from everywhere.

Correct Answer - B
Option B is correct. Amazon Cognito Identity Pools can support unauthenticated identities by providing a unique identifier and AWS credentials for users who do not authenticate with an identity provider. Unauthenticated users can be associated with a role with limited access to resources compared to a role for authenticated users.
Option A is incorrect. Cognito will allow unauthenticated users without being a security risk.
Option C is incorrect. Cognito supports both authenticated and unauthenticated users.
References:
https://aws.amazon.com/cognito/
http://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-integrate-with-cognito.html
https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools.html
https://docs.aws.amazon.com/cognito/latest/developerguide/identity-pools.html
https://aws.amazon.com/cognito/getting-started/
https://docs.aws.amazon.com/cognito/latest/developerguide/concepts.html