Question
A security engineer is configuring a new website that is named example.com. The security engineer wants to secure communications with the website by requiring users to connect to example.com through HTTPS.
Which of the following is a valid option for storing SSL/TLS certificates?
- A. Custom SSL certificate that is stored in AWS Key Management Service (AWS KMS)
- B. Default SSL certificate that is stored in Amazon CloudFront
- C. Custom SSL certificate that is stored in AWS Certificate Manager (ACM) Correct
- D. Default SSL certificate that is stored in Amazon S3
Explanation
According to official AWS documentation, AWS Certificate Manager (ACM) is designed specifically for storing and managing SSL/TLS certificates used to encrypt traffic over HTTPS. Option C correctly identifies ACM as a valid option for storing custom SSL certificates.
