Pre-Summer Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: validbest

Exam SCS-C02 All Questions
Exam SCS-C02 All Questions

View all questions & answers for the SCS-C02 exam

Amazon Web Services AWS Certified Specialty SCS-C02 Question # 100 Topic 10 Discussion

SCS-C02 Exam Topic 10 Question 100 Discussion:
Question #: 100
Topic #: 10

A company wants to deploy a distributed web application on a fleet of EC2 instances. The fleet will be fronted by a Classic Load Balancer that will be configured to terminate the TLS connection The company wants to make sure that all past and current TLS traffic to the Classic Load Balancer stays secure even if the certificate private key is leaked.

To ensure the company meets these requirements, a Security Engineer can configure a Classic Load Balancer with:


A.

An HTTPS listener that uses a certificate that is managed by Amazon Certification Manager.


B.

An HTTPS listener that uses a custom security policy that allows only perfect forward secrecy cipher suites


C.

An HTTPS listener that uses the latest IAM predefined ELBSecuntyPolicy-TLS-1 -2-2017-01 security policy


D.

A TCP listener that uses a custom security policy that allows only perfect forward secrecy cipher suites.


Get Premium SCS-C02 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.