SCS-C02 · Question #79
SCS-C02 Question #79: Real Exam Question with Answer & Explanation
Sign in or unlock SCS-C02 to reveal the answer and full explanation for question #79. The question stem and answer options stay visible for context.
Question
A company uses Amazon Route 53 to create a public DNS zone for the domain example.com in Account A. The company creates another public DNS zone for the subdomain dev.example.com in Account B. A security engineer creates a wildcard certificate (*.dev.example.com) with DNS validation by using AWS Certificate Manager (ACM). The security engineer validates that the corresponding CNAME records have been created in the zone for dev.example.com in Account B. After all these operations are completed, the certificate status is still pending validation. What should the security engineer do to resolve this issue?
Options
- APurchase a valid wildcard certificate authority (CA) certificate that supports managed renewal.
- BAdd NS records for the subdomain dev.example.com to the Route 53 parent zone example.com
- CUse AWS Certificate Manager Private Certificate Authority to create a subordinate certificate
- DResend the email message that requests ownership validation of dev.example.com.
Unlock SCS-C02 to see the answer
You've previewed enough free SCS-C02 questions. Unlock SCS-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.