Amazon Exam SCS-C01 Topic 5 Question 8 Discussion

Actual exam question for Amazon's SCS-C01 exam

Question #: 8
Topic #: 5

A company deploys a distributed web application on a fleet of Amazon EC2 instances. The fleet is behind an Application Load Balancer (ALB) that will be configured to terminate the TLS connection. All TLS traffic to the ALB must stay secure, even if the certificate private key is compromised.

How can a security engineer meet this requirement?

ACreate an HTTPS listener that uses a certificate that is managed by AWS Certificate Manager (ACM).

BCreate an HTTPS listener that uses a security policy that uses a cipher suite with perfect toward secrecy (PFS).

CCreate an HTTPS listener that uses the Server Order Preference security feature.

DCreate a TCP listener that uses a custom security policy that allows only cipher suites with perfect forward secrecy (PFS).

Show Suggested Answer

Suggested Answer: A

by Lettie at May 09, 2022, 07:22 AM

Limited Time Offer

25%

Off

Get Premium SCS-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!