Q43 — AWS SAA-C03 Ch.11

Question 43 of 100 | ← Chapter 11

Q743. An international company has a subdomain for each country that the company operates in. The subdomains are formatted as example.com, country1.example.com, and country2.example.com. The company's workloads are behind an Application Load Balancer. The company wants to encrypt the website data that is in transit.Which combination of steps will meet these requirements? (Choose two.)

• A. Use the AWS Certificate Manager (ACM) console to request a public certificate for the apex top domain example com and a wildcard certificate for *.example.com. ✓
• B. Use the AWS Certificate Manager (ACM) console to request a private certificate for the apex top domain example.com and a wildcard certificate for *.example.com.
• C. Use the AWS Certificate Manager (ACM) console to request a public and private certificate for the apex top domain example.com.
• D. Validate domain ownership by email address. Switch to DNS validation by adding the required DNS records to the DNS provider.
• E. Validate domain ownership for the domain by adding the required DNS records to the DNS provider. ✓

Correct Answer: A. Use the AWS Certificate Manager (ACM) console to request a public certificate for the apex top domain example com and a wildcard certificate for *.example.com., E. Validate domain ownership for the domain by adding the required DNS records to the DNS provider.

Explanation

Based on the content of the Example Domain, the response to the query would be as follows:To meet the requirements of encrypting the website data in transit for the international company's subdomains (example.com, country1.example.com, and country2.example.com) behind an Application Load Balancer, the combination of steps that will meet these requirements are:A. Use the AWS Certificate Manager (ACM) console to request a public certificate for the apex top domain example.com and a wildcard certificate for *.example.com.E. Validate domain ownership for the domain by adding the required DNS records to the DNS provider.Option A, using the AWS Certificate Manager (ACM) console to request a public certificate for the apex top domain example.com and a wildcard certificate for *.example.com, is the correct step to request the necessary certificates. This combination ensures that both the apex domain and all subdomains are covered by the certificates. The public certificates provided by ACM can be used for encrypting website data in transit.Option E, validating domain ownership for the domain by adding the required DNS records to the DNS provider, is the correct step to complete the certificate validation process. By adding the required DNS records to the DNS provider, the ownership of the domain is verified, and the certificates can be successfully issued.Therefore, the combination of steps that will meet the requirements of encrypting the website data in transit for the international company's subdomains is A: Use the AWS Certificate Manager (ACM) console to request a public certificate for the apex top domain example.com and a wildcard certificate for *.example.com, and E: Validate domain ownership for the domain by adding the required DNS records to the DNS provider.