ANS-C01 · Question #67
ANS-C01 Question #67: Real Exam Question with Answer & Explanation
Sign in or unlock ANS-C01 to reveal the answer and full explanation for question #67. The question stem and answer options stay visible for context.
Question
A media company is implementing a news website for a global audience. The website uses Amazon CloudFront as its content delivery network. The backend runs on Amazon EC2 Windows instances behind an Application Load Balancer (ALB). The instances are part of an Auto Scaling group. The company's customers access the website by using service example com as the CloudFront custom domain name. The CloudFront origin points to an ALB that uses service- alb.example.com as the domain name. The company's security policy requires the traffic to be encrypted in transit at all times between the users and the backend. Which combination of changes must the company make to meet this security requirement? (Choose three.)
Options
- ACreate a self-signed certificate for service.example.com. Import the certificate into AWS
- BCreate a certificate for service.example.com by using AWS Certificate Manager (ACM). Configure
- CCreate a certificate with any domain name by using AWS Certificate Manager (ACM) for the EC2
- DCreate a public certificate from a third-party certificate provider with any domain name for the EC2
- ECreate a certificate for service-alb.example.com by using AWS Certificate Manager (ACM). On
- FCreate a self-signed certificate for service-alb.example.com. Import the certificate into AWS
Unlock ANS-C01 to see the answer
You've previewed enough free ANS-C01 questions. Unlock ANS-C01 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.