Exam AWS Certified Security - Specialty topic 1 question 349 discussion

Exam question from Amazon's AWS Certified Security - Specialty

Question #: 349
Topic #: 1

[All AWS Certified Security - Specialty Questions]

A company uses AWS Certificate Manager (ACM) to automate the renewal of SSL/TLS certificates that the company's Elastic Load Balancers use. The company recently noticed that ACM was unable to automatically renew some certificates. These certificates have a status of "pending validation” in the ACM console.

A security engineer configured the certificates by using DNS validation. The security engineer has verified that the existing certificates have not expired.

What should the security engineer do to correct this issue?

A. Manually validate ownership of each domain in the ACM console.
B. Verify that the DNS CNAME for each domain matches the ACM certificate CNAME record.
C. Export and then reimport the certificates into ACM.
D. Validate the ownership of each domain by using email validation.

Show Suggested Answer

Suggested Answer: B 🗳️

by AdamWest at Nov. 20, 2022, 8:10 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

AdamWest

Highly Voted 2 years, 5 months ago

Selected Answer: B

B https://aws.amazon.com/premiumsupport/knowledge-center/acm-certificate-pending-validation/

upvoted 14 times

...

Toptip

Most Recent 1 year, 11 months ago

Selected Answer: B

B 100% correct DNS validation = CNAME

upvoted 1 times

...

Smartphone

2 years, 3 months ago

If your certificate is in the Pending validation state, then confirm that the CNAME record provided by ACM was added to the correct DNS configuration. To determine the DNS configuration to add the CNAME record, run a command similar to the following: https://aws.amazon.com/premiumsupport/knowledge-center/acm-certificate-pending-validation/ If the ACM certificate request status is Pending validation, the request is waiting for action from you. If you chose email validation when you made the request, you or an authorized representative must respond to the validation email messages. https://docs.aws.amazon.com/acm/latest/userguide/certificate-validation.html D appears the correct answer

upvoted 2 times

...

Subs2021

2 years, 4 months ago

Selected Answer: D

https://docs.aws.amazon.com/acm/latest/userguide/dns-validation.html