Which Amazon Cognito feature will meet these requirements?

Explanations:

SMS text message MFA requires users to enter a code sent via SMS. However, it doesn’t dynamically trigger based on suspicious activity, so it doesn’t meet the requirement for conditional MFA based on security concerns.

Advanced security metrics provide insights into unusual activity but don’t trigger mandatory MFA. It does not offer a dynamic response based on detected risks like adaptive authentication.

TOTP software token MFA is another form of MFA that requires a time-based code. Like SMS MFA, it doesn’t address dynamic enforcement of MFA based on suspicious behavior.

Adaptive authentication is designed to apply MFA only when suspicious activities, such as abnormal sign-ins, are detected. It provides conditional MFA, making it the ideal solution for the company’s needs.