nerdexam
AmazonAmazon

SAA-C03 · Question #620

SAA-C03 Question #620: Real Exam Question with Answer & Explanation

The correct answer is D: Use AWS Certificate Manager (ACM) to import an SSL/TLS certificate. Apply the certificate to the. ACM does not manage the renewal process for imported certificates. You are responsible for monitoring the expiration date of your imported certificates and for renewing them before they Check this question on the link below: Q: What types of certificates can I create and manage w

Submitted by naveen.iyer· Mar 4, 2026Design Secure Architectures

Question

A company is deploying a new public web application to AWS. The application will run behind an Application Load Balancer (ALB). The application needs to be encrypted at the edge with an SSL/TLS certificate that is issued by an external certificate authority (CA). The certificate must be rotated each year before the certificate expires. What should a solutions architect do to meet these requirements?

Options

  • AUse AWS Certificate Manager (ACM) to issue an SSL/TLS certificate. Apply the certificate to the
  • BUse AWS Certificate Manager (ACM) to issue an SSL/TLS certificate. Import the key material
  • CUse AWS Certificate Manager (ACM) Private Certificate Authority to issue an SSL/TLS certificate
  • DUse AWS Certificate Manager (ACM) to import an SSL/TLS certificate. Apply the certificate to the

Explanation

ACM does not manage the renewal process for imported certificates. You are responsible for monitoring the expiration date of your imported certificates and for renewing them before they Check this question on the link below: Q: What types of certificates can I create and manage with ACM?

Community Discussion

No community discussion yet for this question.

Full SAA-C03 PracticeBrowse All SAA-C03 Questions