Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Amazon DVA-C02 Exam - Topic 3 Question 67 Discussion

A developer wants to use an Amazon CloudFront distribution to deliver a web application to users. Users will access the application through the internet.The developer needs to create an SSL/TLS certificate to use with the CloudFront distribution. The developer wants to minimize operational overhead by ensuring that the certificate is renewed automatically.Which solution will meet these requirements?
C) Create a public certificate that uses DNS validation in AWS Certificate Manager (ACM).
A) Create a public certificate that uses DNS validation in IAM.
B) Import a certificate into IAM. Configure managed renewal for the certificate.
D) Create a public certificate that uses email validation in AWS Certificate Manager (ACM).

Amazon DVA-C02 Exam - Topic 3 Question 67 Discussion

Actual exam question for Amazon's DVA-C02 exam
Question #: 67
Topic #: 3
[All DVA-C02 Questions]

A developer wants to use an Amazon CloudFront distribution to deliver a web application to users. Users will access the application through the internet.

The developer needs to create an SSL/TLS certificate to use with the CloudFront distribution. The developer wants to minimize operational overhead by ensuring that the certificate is renewed automatically.

Which solution will meet these requirements?

Show Suggested Answer Hide Answer
Suggested Answer: C

The best answer is to request a public certificate in AWS Certificate Manager and validate it with DNS. ACM manages public certificate renewal automatically when validation remains in place, which minimizes operational overhead. DNS validation is preferable to email validation because it does not require manual approval emails during renewal workflows. IAM server certificates are legacy-style certificate storage and do not provide the same managed lifecycle experience as ACM. Imported certificates are not automatically renewed by ACM because ACM does not control their issuance lifecycle. For CloudFront, AWS recommends ACM certificates, and CloudFront certificates must be requested or imported in the US East (N. Virginia) Region, although the option's key point is ACM public certificate with DNS validation. (AWS Documentation)

===============


by Tegan at Jun 19, 2026, 05:10 PM

Limited Time Offer

25%

Off

Get Premium DVA-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel

Currently there are no comments in this discussion, be the first to comment!


Save Cancel