Amazon Exam SOA-C02 Topic 12 Question 22 Discussion

Actual exam question for Amazon's SOA-C02 exam

Question #: 22
Topic #: 12

A company hosts an online shopping portal in the AWS Cloud. The portal provides HTTPS security by using a

TLS certificate on an Elastic Load Balancer (ELB). Recently, the portal suffered an outage because the TLS

certificate expired. A SysOps administrator must create a solution to automatically renew certificates to avoid

this issue in the future.

What is the MOST operationally efficient solution that meets these requirements?

ARequest a public certificate by using AWS Certificate Manager (ACM). Associate the certificate from ACM
with the ELB. Write a scheduled AWS Lambda function to renew the certificate every 18 months.

BRequest a public certificate by using AWS Certificate Manager (ACM). Associate the certificate from ACM
with the ELB. ACM will automatically manage the renewal of the certificate.

CRegister a certificate with a third-party certificate authority (CA). Import this certificate into AWS Certificate
Manager (ACM). Associate the certificate from ACM with the ELB. ACM will automatically manage the
renewal of the certificate.

DRegister a certificate with a third-party certificate authority (CA). Configure the ELB to import the certificate
directly from the CA. Set the certificate refresh cycle on the ELB to refresh when the certificate is within 3
months of the expiration date.

Show Suggested Answer

Suggested Answer: C

by Tresa at May 07, 2022, 12:02 AM

Limited Time Offer

25%

Off

Get Premium SOA-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!