ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified Solutions Architect - Associate SAA-C03 All Questions

View all questions & answers for the AWS Certified Solutions Architect - Associate SAA-C03 exam
Go to Exam

Exam AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 577 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C03
Question #: 577
Topic #: 1
[All AWS Certified Solutions Architect - Associate SAA-C03 Questions]

A company uses an Amazon CloudFront distribution to serve content pages for its website. The company needs to ensure that clients use a TLS certificate when accessing the company's website. The company wants to automate the creation and renewal of the TLS certificates.

Which solution will meet these requirements with the MOST operational efficiency?

  • A. Use a CloudFront security policy to create a certificate.
  • B. Use a CloudFront origin access control (OAC) to create a certificate.
  • C. Use AWS Certificate Manager (ACM) to create a certificate. Use DNS validation for the domain.
  • D. Use AWS Certificate Manager (ACM) to create a certificate. Use email validation for the domain.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
by Bmaster at Aug. 2, 2023, 4:27 a.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Bmaster
Highly Voted 1 year, 1 month ago
C is correct. "ACM provides managed renewal for your Amazon-issued SSL/TLS certificates. This means that ACM will either renew your certificates automatically (if you are using DNS validation), or it will send you email notices when expiration is approaching. These services are provided for both public and private ACM certificates." https://docs.aws.amazon.com/acm/latest/userguide/managed-renewal.html
upvoted 10 times
...
Guru4Cloud
Highly Voted 1 year, 1 month ago
Selected Answer: C
The key reasons are: AWS Certificate Manager (ACM) provides free public TLS/SSL certificates and handles certificate renewals automatically. Using DNS validation with ACM is operationally efficient since it automatically makes changes to Route 53 rather than requiring manual validation steps. ACM integrates natively with CloudFront distributions for delivering HTTPS content. CloudFront security policies and origin access controls do not issue TLS certificates. Email validation requires manual steps to approve the domain validation emails for each renewal.
upvoted 6 times
...
awsgeek75
Most Recent 8 months, 3 weeks ago
Selected Answer: C
For me, C is the only realistic option as I don't think you can do AB without a lot of complexity. D just makes no sense.
upvoted 2 times
...
ibu007
1 year ago
Selected Answer: C
Use AWS Certificate Manager (ACM) to create a certificate. Use DNS validation for the domain
upvoted 4 times
...
chen0305_099
1 year, 1 month ago
Selected Answer: C
C 似乎是正確的
upvoted 4 times
...
Kiki_Pass
1 year, 1 month ago
Selected Answer: C
"DNS Validation is preferred for automation purposes" -- Stephane's course on Udemy
upvoted 3 times
...
mrsoa
1 year, 1 month ago
Selected Answer: C
C seems to be correct
upvoted 2 times
...
nananashi
1 year, 1 month ago
I think the general product uses DNS rather than email to automate, is the given answer correct?
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago