SCS-C02 · Question #304
Your company is planning on hosting an internal network in AWS. They want machines in the VPC to authenticate using private certificates. They want to minimize the work and maintenance in working…
The correct answer is B. Consider using AWS Certificate Manager. The AWS Documentation mentions the following ACM is tightly linked with AWS Certificate Manager Private Certificate Authority. You can use ACM PCA to create a private certificate authority (CA) and then use ACM to issue private certificates. These are SSL/TLS X.509 certificates…
Question
Your company is planning on hosting an internal network in AWS. They want machines in the VPC to authenticate using private certificates. They want to minimize the work and maintenance in working with certificates. What is the ideal way to fulfil this requirement.
Options
- AConsider using Windows Server 2016 Certificate Manager
- BConsider using AWS Certificate Manager
- CConsider using AWS Access keys to generate the certificates
- DConsider using AWS Trusted Advisor for managing the certificates
How the community answered
(40 responses)- A3% (1)
- B70% (28)
- C18% (7)
- D10% (4)
Explanation
The AWS Documentation mentions the following ACM is tightly linked with AWS Certificate Manager Private Certificate Authority. You can use ACM PCA to create a private certificate authority (CA) and then use ACM to issue private certificates. These are SSL/TLS X.509 certificates that identify users, computers, applications, services, servers, and other devices internally. Private certificates cannot be publicly trusted Option A is partially invalid. Windows Server 2016 Certificate Manager can be used but since there is a requirement to "minimize the work and maintenance", AWS Certificate Manager should be used Option C and D are invalid because these cannot be used for managing https://docs.aws.amazon.com/acm/latest/userguide/acm-overview.html
Topics
Community Discussion
No community discussion yet for this question.