ANS-C01 · Question #67
A media company is implementing a news website for a global audience. The website uses Amazon CloudFront as its content delivery network. The backend runs on Amazon EC2 Windows instances behind an…
The correct answer is B. Create a certificate for service.example.com by using AWS Certificate Manager (ACM). Configure D. Create a public certificate from a third-party certificate provider with any domain name for the EC2 E. Create a certificate for service-alb.example.com by using AWS Certificate Manager (ACM). On. ACM removes the time-consuming manual process of purchasing, uploading, and renewing SSL/TLS certificates. https://aws.amazon.com/certificate-manager/ https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cnames-and-https- requirements.html…
Question
A media company is implementing a news website for a global audience. The website uses Amazon CloudFront as its content delivery network. The backend runs on Amazon EC2 Windows instances behind an Application Load Balancer (ALB). The instances are part of an Auto Scaling group. The company's customers access the website by using service example com as the CloudFront custom domain name. The CloudFront origin points to an ALB that uses service- alb.example.com as the domain name. The company's security policy requires the traffic to be encrypted in transit at all times between the users and the backend. Which combination of changes must the company make to meet this security requirement? (Choose three.)
Options
- ACreate a self-signed certificate for service.example.com. Import the certificate into AWS
- BCreate a certificate for service.example.com by using AWS Certificate Manager (ACM). Configure
- CCreate a certificate with any domain name by using AWS Certificate Manager (ACM) for the EC2
- DCreate a public certificate from a third-party certificate provider with any domain name for the EC2
- ECreate a certificate for service-alb.example.com by using AWS Certificate Manager (ACM). On
- FCreate a self-signed certificate for service-alb.example.com. Import the certificate into AWS
How the community answered
(28 responses)- A4% (1)
- B68% (19)
- C7% (2)
- F21% (6)
Explanation
ACM removes the time-consuming manual process of purchasing, uploading, and renewing SSL/TLS certificates. https://aws.amazon.com/certificate-manager/ https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cnames-and-https- requirements.html https://docs.aws.amazon.com/elasticloadbalancing/latest/application/create-https-listener.html You can configure one or more cache behaviors in your CloudFront distribution to require HTTPS for communication between viewers and CloudFront. https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-https-viewers-to- Option C is wrong. You cannot associate ACM certificates with an EC2 instance that is not connected to a Nitro Enclave. https://docs.aws.amazon.com/acm/latest/userguide/acm-services.html
Topics
Community Discussion
No community discussion yet for this question.