SOA-C02 · Question #474
A company has a secure website running on Amazon EC2 instances behind an Application Load Balancer (ALB). An SSL certificate from AWS Certificate Manager (ACM) is used on the ALB. Users with legacy…
The correct answer is D. Update the SSL negotiation configuration of the ALB with a security policy that contains ciphers. Identify your load balancer's security policy - Determine that protocols and ciphers that are supported by your load balancer's security policy - Update your load balancer's security policy, if necessary https://repost.aws/knowledge-center/elb-fix-ssl-tls-negotiation-error
Question
A company has a secure website running on Amazon EC2 instances behind an Application Load Balancer (ALB). An SSL certificate from AWS Certificate Manager (ACM) is used on the ALB. Users with legacy web browsers are experiencing issues with the website. How should the SysOps administrator resolve these issues in the MOST operationally efficient manner?
Options
- ACreate a new SSL certificate in ACM and install the new certificate on the ALB to support legacy
- BCreate a second ALB and install a custom SSL certificate with a different domain name on the
- CRemove the ALB from the configuration and install a custom SSL certificate on each web server.
- DUpdate the SSL negotiation configuration of the ALB with a security policy that contains ciphers
How the community answered
(25 responses)- A12% (3)
- B4% (1)
- C4% (1)
- D80% (20)
Explanation
- Identify your load balancer's security policy - Determine that protocols and ciphers that are supported by your load balancer's security policy - Update your load balancer's security policy, if necessary https://repost.aws/knowledge-center/elb-fix-ssl-tls-negotiation-error
Topics
Community Discussion
No community discussion yet for this question.