A company hosts an online shopping portal in the AWS Cloud. The portal provides HTTPS security by using a TLS certificate on an Elastic Load Balancer (ELB). Recently, the portal suffered an outage bec

Question

Options

• ARequest a public certificate by using AWS Certificate Manager (ACM).
• BRequest a public certificate by using AWS Certificate Manager (ACM).
• CRegister a certificate with a third-party certificate authority (CA).
• DRegister a certificate with a third-party certificate authority (CA).

• A
  17% (5)
• B
  72% (21)
• C
  7% (2)
• D
  3% (1)

Explanation

Option B is correct because ACM automatically renews public certificates it issues before they expire - eliminating the manual renewal process that caused the outage. When you request a certificate directly through ACM and attach it to an ELB, renewal happens without any administrator intervention.

Why the distractors are wrong: Options A and B appear identical in this rendering, but in the actual exam, Option A typically refers to importing a third-party certificate into ACM - imported certificates are not automatically renewed by ACM, so expiration risk remains. Options C and D involve managing certificates with a third-party CA, which requires manual tracking and renewal steps, making them operationally inefficient and prone to the exact failure described.

Memory tip: Think "ACM-issued = Auto-renewed, ACM-imported = You're on your own." If ACM didn't create the certificate, it won't renew it. The keyword in the question is "automatically" - only natively requested ACM certificates qualify.

No community discussion yet for this question.