Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Amazon SCS-C02 Exam - Topic 6 Question 46 Discussion

[Logging and Monitoring]A company hosts an end user application on AWS Currently the company deploys the application on Amazon EC2 instances behind an Elastic Load Balancer The company wants to configure end-to-end encryption between the Elastic Load Balancer and the EC2 instances.Which solution will meet this requirement with the LEAST operational effort?
A) Use Amazon issued AWS Certificate Manager (ACM) certificates on the EC2 instances and the Elastic Load Balancer to configure end-to-end encryption
B) Import a third-party SSL certificate to AWS Certificate Manager (ACM) Install the third-party certificate on the EC2 instances Associate the ACM imported third-party certificate with the Elastic Load Balancer
C) Deploy AWS CloudHSM Import a third-party certificate Configure the EC2 instances and the Elastic Load Balancer to use the CloudHSM imported certificate
D) Import a third-party certificate bundle to AWS Certificate Manager (ACM) Install the third-party certificate on the EC2 instances Associate the ACM imported third-party certificate with the Elastic Load Balancer.

Amazon SCS-C02 Exam - Topic 6 Question 46 Discussion

Actual exam question for Amazon's SCS-C02 exam
Question #: 46
Topic #: 6
[All SCS-C02 Questions]

[Logging and Monitoring]

A company hosts an end user application on AWS Currently the company deploys the application on Amazon EC2 instances behind an Elastic Load Balancer The company wants to configure end-to-end encryption between the Elastic Load Balancer and the EC2 instances.

Which solution will meet this requirement with the LEAST operational effort?

Show Suggested Answer Hide Answer
Suggested Answer: A

To configure end-to-end encryption between the Elastic Load Balancer and the EC2 instances with the least operational effort, the most appropriate solution would be to use Amazon issued AWS Certificate Manager (ACM) certificates on the EC2 instances and the Elastic Load Balancer to configure end-to-end encryption.

AWS Certificate Manager - Amazon Web Services:Elastic Load Balancing - Amazon Web Services:Amazon Elastic Compute Cloud - Amazon Web Services:AWS Certificate Manager - Amazon Web Services


by Hollis at Jun 12, 2025, 01:25 AM

Limited Time Offer

25%

Off

Get Premium SCS-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Veronika
7 months ago
Surprised that A is the least effort, seems too simple!
upvoted 0 times
...
Percy
7 months ago
I think B is better for flexibility.
upvoted 0 times
...
Maynard
8 months ago
Is using CloudHSM really necessary for this?
upvoted 0 times
...
Dottie
8 months ago
Definitely A, no need for third-party hassle.
upvoted 0 times
...
Tambra
8 months ago
Option A is the easiest way to go!
upvoted 0 times
...
Therese
8 months ago
I’m leaning towards option A, but I’m a bit confused about whether it really covers both ends of the encryption.
upvoted 0 times
...
Merilyn
8 months ago
I feel like deploying CloudHSM is overkill for this scenario. It seems like a lot of extra work compared to just using ACM.
upvoted 0 times
...
Callie
9 months ago
I think option A sounds familiar, but I practiced a question where we had to import a third-party certificate instead.
upvoted 0 times
...
Talia
9 months ago
I remember studying about using AWS Certificate Manager for SSL certificates, but I'm not sure if using Amazon-issued certificates is the easiest way.
upvoted 0 times
...
Carli
9 months ago
I'm leaning towards option D. Using a certificate bundle from a third-party and associating it with the load balancer and instances seems like the most comprehensive solution.
upvoted 0 times
...
Lea
9 months ago
Option B looks good to me. Importing a third-party certificate and associating it with the load balancer seems like a simple and reliable approach.
upvoted 0 times
...
Yvonne
9 months ago
Hmm, I'm a bit confused about the differences between the options. I'll need to carefully review the details of each one to determine the least operational effort.
upvoted 0 times
...
Ellsworth
10 months ago
This question seems straightforward. I think option A is the best choice since it uses the AWS-provided ACM certificates, which should be the easiest to set up.
upvoted 0 times
...
Micaela
1 year ago
Option B looks like it requires the most work, but at least we get to play with CloudHSM. That could be fun, right? *wink wink*
upvoted 0 times
...
Michel
1 year ago
Haha, does anyone else feel like they're back in college taking an exam? Gotta love these tricky AWS certification questions!
upvoted 0 times
Mitzie
11 months ago
B) Import a third-party SSL certificate to AWS Certificate Manager (ACM) Install the third-party certificate on the EC2 instances Associate the ACM imported third-party certificate with the Elastic Load Balancer
upvoted 0 times
...
Kati
12 months ago
A) Use Amazon issued AWS Certificate Manager (ACM) certificates on the EC2 instances and the Elastic Load Balancer to configure end-to-end encryption
upvoted 0 times
...
...
Lachelle
1 year ago
Hold up, is Option A really the least effort? I mean, we still have to install the certificates on the EC2 instances, right? Hmm, not sure it's as simple as it seems.
upvoted 0 times
...
Georgeanna
1 year ago
I agree, Option A is the way to go. Who wants to deal with third-party certificates and all that hassle?
upvoted 0 times
Miesha
11 months ago
User 3: Yeah, using Amazon issued certificates seems like the most straightforward option.
upvoted 0 times
...
Jennifer
11 months ago
User 2: I agree, dealing with third-party certificates sounds like a headache.
upvoted 0 times
...
Ellsworth
1 year ago
User 1: Option A is definitely the easiest way to go.
upvoted 0 times
...
...
Sarina
1 year ago
That's a valid point, Lucy. But I still think option A is more convenient for the company in terms of operational effort.
upvoted 0 times
...
Olen
1 year ago
Option A seems like the easiest choice. AWS Certificate Manager takes care of everything, so less operational effort for us.
upvoted 0 times
Tyra
1 year ago
It's important to minimize operational effort, so Option A is the most efficient solution in this case.
upvoted 0 times
...
Sherron
1 year ago
I agree, using Amazon issued certificates with ACM is definitely the way to go for end-to-end encryption.
upvoted 0 times
...
Onita
1 year ago
I agree, using Amazon issued certificates with ACM is definitely the way to go for end-to-end encryption.
upvoted 0 times
...
Esteban
1 year ago
Option A seems like the easiest choice. AWS Certificate Manager takes care of everything, so less operational effort for us.
upvoted 0 times
...
Regenia
1 year ago
Option A seems like the easiest choice. AWS Certificate Manager takes care of everything, so less operational effort for us.
upvoted 0 times
...
...
Lucy
1 year ago
I disagree, I believe option B is better. Importing a third-party SSL certificate gives us more control over the encryption process.
upvoted 0 times
...
Sarina
1 year ago
I think option A is the best choice. Using Amazon issued certificates will be the easiest and require the least operational effort.
upvoted 0 times
...

Save Cancel