nerdexam
Amazon

SAA-C03 · Question #620

A company is deploying a new public web application to AWS. The application will run behind an Application Load Balancer (ALB). The application needs to be encrypted at the edge with an SSL/TLS certif

Sign in or unlock SAA-C03 to reveal the answer and full explanation for question #620. The question stem and answer options stay visible for context.

Submitted by naveen.iyer· Mar 4, 2026Design Secure Architectures

Question

A company is deploying a new public web application to AWS. The application will run behind an Application Load Balancer (ALB). The application needs to be encrypted at the edge with an SSL/TLS certificate that is issued by an external certificate authority (CA). The certificate must be rotated each year before the certificate expires. What should a solutions architect do to meet these requirements?

Options

  • AUse AWS Certificate Manager (ACM) to issue an SSL/TLS certificate. Apply the certificate to the
  • BUse AWS Certificate Manager (ACM) to issue an SSL/TLS certificate. Import the key material
  • CUse AWS Certificate Manager (ACM) Private Certificate Authority to issue an SSL/TLS certificate
  • DUse AWS Certificate Manager (ACM) to import an SSL/TLS certificate. Apply the certificate to the

Unlock SAA-C03 to see the answer

You've previewed enough free SAA-C03 questions. Unlock SAA-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full SAA-C03 Practice