ExpertMedium1 markMultiple Choice
AWS SAA-C03 · Question 51 · Domain 1.3: Data Security
A company is designing a secure architecture for a web application. They want to store SSL/TLS certificates and automatically deploy them to their Application Load Balancer (ALB) and Amazon CloudFront distribution. <br/><br/>Which TWO AWS services should they use? (Select TWO.)
A company is designing a secure architecture for a web application. They want to store SSL/TLS certificates and automatically deploy them to their Application Load Balancer (ALB) and Amazon CloudFront distribution. <br/><br/>Which TWO AWS services should they use? (Select TWO.)
Answer options:
A.
AWS Certificate Manager (ACM)
B.
AWS Secrets Manager
C.
AWS Key Management Service (KMS)
D.
Application Load Balancer (ALB)
E.
Amazon EC2
How to approach this question
Identify the service that manages certificates (ACM) and where they are deployed (ALB).
Full Answer
AWS Certificate Manager (ACM)<br/>Application Load Balancer (ALB)
AWS Certificate Manager (ACM) handles the complexity of creating, storing, and renewing public and private SSL/TLS X.509 certificates. You can deploy these certificates directly to AWS resources like Application Load Balancers (ALB) and Amazon CloudFront.
Common mistakes
Thinking KMS or Secrets Manager is used for SSL certificates.
Practice the full AWS SAA-C03 Practice Exam 4
65 questions · hints · full answers · grading
More questions from this exam
Q01A company has multiple AWS accounts in an AWS Organizations organization. The security team wants...MediumQ02An application running on Amazon EC2 instances needs to access an Amazon DynamoDB table. Both res...EasyQ03A company is designing a web application that will be hosted on AWS. The application will use an ...MediumQ04A company is building a mobile app that requires users to authenticate using their social media a...HardQ05A solutions architect is designing a VPC for a three-tier web application. The database tier must...Medium