ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified Security - Specialty SCS-C02 All Questions

View all questions & answers for the AWS Certified Security - Specialty SCS-C02 exam
Go to Exam

Exam AWS Certified Security - Specialty SCS-C02 topic 1 question 129 discussion

Exam question from Amazon's AWS Certified Security - Specialty SCS-C02
Question #: 129
Topic #: 1
[All AWS Certified Security - Specialty SCS-C02 Questions]

A company deploys a distributed web application on a fleet of Amazon EC2 instances. The fleet is behind an Application Load Balancer (ALB) that will be configured to terminate the TLS connection. All TLS traffic to the ALB must stay secure, even if the certificate private key is compromised.

How can a security engineer meet this requirement?

  • A. Create an HTTPS listener that uses a certificate that is managed by AWS Certificate Manager (ACM).
  • B. Create an HTTPS listener that uses a security policy that uses a cipher suite with perfect forward secrecy (PFS).
  • C. Create an HTTPS listener that uses the Server Order Preference security feature.
  • D. Create a TCP listener that uses a custom security policy that allows only cipher suites with perfect forward secrecy (PFS).
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by Zek at May 15, 2024, 10:31 p.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
heatblur
3 months, 3 weeks ago
Selected Answer: B
Perfect Forward Secrecy (PFS): This is the key feature that addresses the security requirement. PFS ensures that even if the private key is compromised in the future, past communications cannot be decrypted. This meets the requirement that "All TLS traffic to the ALB must stay secure, even if the certificate private key is compromised."
upvoted 1 times
...
Certified101
6 months, 3 weeks ago
Selected Answer: B
B as Zek mentioned
upvoted 3 times
...
Zek
6 months, 3 weeks ago
B - correct answer https://aws.amazon.com/blogs/aws/elastic-load-balancing-perfect-forward-secrecy-and-other-security-enhancements/
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago