Q79 — AWS SAA-C03 Ch.12

Question 79 of 100 | ← Chapter 12

Q879. A company wants to configure its Amazon CloudFront distribution to use SSL/TLS certificates. The company does not want to use the default domain name for the distribution. Instead, the company wants to use a different domain name for the distribution.Which solution will deploy the certificate without incurring any additional costs?

Correct Answer: C. Request an Amazon issued public certificate from AWS Certificate Manager (ACM) in the us-east-1 Region.

Explanation

The solution that will deploy the certificate without incurring any additional costs is option C: Request an Amazon issued public certificate from AWS Certificate Manager (ACM) in the us-east-1 Region.AWS Certificate Manager (ACM) is a service that provides SSL/TLS certificates for use with AWS services. When you request a public certificate from ACM, there is no additional cost for the certificate itself.To configure Amazon CloudFront to use SSL/TLS certificates, you can request a public certificate from ACM in the us-east-1 Region. This certificate can then be associated with the desired domain name for your CloudFront distribution at no additional cost.Option A suggests requesting an Amazon issued private certificate from ACM in the us-east-1 Region. Private certificates are typically used for internal resources and are not suitable for securing a public-facing CloudFront distribution. Additionally, private certificates may incur additional costs.Options B and D suggest requesting Amazon issued private or public certificates from ACM in the us-west-1 Region. While it is possible to request certificates in different regions, it is generally recommended to use the us-east-1 Region for ACM certificates due to its broader availability and integration with AWS services.In summary, the solution that will deploy the certificate without incurring any additional costs is to request an Amazon issued public certificate from AWS Certificate Manager (ACM) in the us-east-1 Region (Option C). This certificate can then be associated with the desired domain name for your CloudFront distribution.