nerdexam
Amazon

SCS-C02 · Question #79

A company uses Amazon Route 53 to create a public DNS zone for the domain example.com in Account A. The company creates another public DNS zone for the subdomain dev.example.com in Account B. A…

The correct answer is B. Add NS records for the subdomain dev.example.com to the Route 53 parent zone example.com. Add NS records to route traffic to your subdomain Select the hosted zone for the domain (example.com). Be sure not to select the name of the subdomain (some.example.com). https://aws.amazon.com/premiumsupport/knowledge-center/create-subdomain-route-53/

Submitted by lucia.co· Mar 6, 2026Infrastructure Security

Question

A company uses Amazon Route 53 to create a public DNS zone for the domain example.com in Account A. The company creates another public DNS zone for the subdomain dev.example.com in Account B. A security engineer creates a wildcard certificate (*.dev.example.com) with DNS validation by using AWS Certificate Manager (ACM). The security engineer validates that the corresponding CNAME records have been created in the zone for dev.example.com in Account B. After all these operations are completed, the certificate status is still pending validation. What should the security engineer do to resolve this issue?

Options

  • APurchase a valid wildcard certificate authority (CA) certificate that supports managed renewal.
  • BAdd NS records for the subdomain dev.example.com to the Route 53 parent zone example.com
  • CUse AWS Certificate Manager Private Certificate Authority to create a subordinate certificate
  • DResend the email message that requests ownership validation of dev.example.com.

How the community answered

(21 responses)
  • A
    5% (1)
  • B
    81% (17)
  • C
    10% (2)
  • D
    5% (1)

Explanation

Add NS records to route traffic to your subdomain Select the hosted zone for the domain (example.com). Be sure not to select the name of the subdomain (some.example.com). https://aws.amazon.com/premiumsupport/knowledge-center/create-subdomain-route-53/

Topics

#ACM certificate#DNS validation#Route 53 delegation#NS records

Community Discussion

No community discussion yet for this question.

Full SCS-C02 Practice