DVA-C02 · Question #732
A developer wants to use an Amazon CloudFront distribution to deliver a web application to users. Users will access the application through the internet. The developer needs to create an SSL/TLS…
The correct answer is C. Create a public certificate that uses DNS validation in AWS Certificate Manager. Using AWS Certificate Manager (ACM) with DNS validation for a public certificate enables automatic renewal and is fully compatible with Amazon CloudFront. This approach minimizes operational overhead because ACM handles the entire lifecycle of the certificate, including…
Question
A developer wants to use an Amazon CloudFront distribution to deliver a web application to users. Users will access the application through the internet. The developer needs to create an SSL/TLS certificate to use with the CloudFront distribution. The developer wants to minimize operational overhead by ensuring that the certificate is renewed automatically. Which solution will meet these requirements?
Options
- ACreate a public certificate that uses DNS validation in IAM.
- BImport a certificate into IAM. Configure managed renewal for the certificate.
- CCreate a public certificate that uses DNS validation in AWS Certificate Manager.
- DCreate a public certificate that uses email validation in AWS Certificate Manager (ACM).
How the community answered
(25 responses)- A4% (1)
- B8% (2)
- C80% (20)
- D8% (2)
Explanation
Using AWS Certificate Manager (ACM) with DNS validation for a public certificate enables automatic renewal and is fully compatible with Amazon CloudFront. This approach minimizes operational overhead because ACM handles the entire lifecycle of the certificate, including renewals and deployment to CloudFront.
Community Discussion
No community discussion yet for this question.