SCS-C02 · Question #46
SCS-C02 Question #46: Real Exam Question with Answer & Explanation
Sign in or unlock SCS-C02 to reveal the answer and full explanation for question #46. The question stem and answer options stay visible for context.
Question
A company is using HTTPS for all its public endpoints. A third-party certificate authority (CA) issues the certificates. The company imports the certificates and attaches the certificates to an Elastic Load Balancer or an Amazon CloudFront distribution. The company also is using a third- party DNS hosting provider. The certificates are near expiration. The company wants to migrate to AWS Certificate Manager (ACM) with automatic renewal. When the company adds the CNAME record during DNS validation, the certificate status changes to Failed. What is the root cause of this issue?
Options
- ADNS validation requires the domain to be hosted on Amazon Route 53.
- BAutomatic renewal for domain validation requires the domain to be hosted on Amazon Route 53.
- CThe domain has Certification Authority Authorization (CAA) DNS records that allow only specific
- DDNS validation requires a TXT record instead of a CNAME record.
Unlock SCS-C02 to see the answer
You've previewed enough free SCS-C02 questions. Unlock SCS-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.