A company is using HTTPS for all its public endpoints. A third-party certificate authority (CA) issues the certificates. The company imports the certificates and attaches the certificates to an Elastic Load Balancer or an Amazon CloudFront distribution. The company also is using a third-party DNS hosting provider. The certificates are near expiration. The company wants to migrate to AWS Certificate Manager (ACM) with automatic renewal. When the company adds the CNAME record during DNS validation, the certificate status changes to Failed. What is the root cause of this issue?

Topic #: - All AWS Certified Security - Specialty Questions

A. DNS validation requires the domain to be hosted on Amazon Route 53.
B. Automatic renewal for domain validation requires the domain to be hosted on Amazon Route 53.
C. The domain has Certification Authority Authorization (CAA) DNS records that allow only specific certificate authorities.
D. DNS validation requires a TXT record instead of a CNAME record.

- Awsexamhub website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Suggested Answer:

Share this post

Join the Discussion