A company wants to configure its Amazon CloudFront distribution to use SSL/TLS certificates and a custom domain name instead of the default distribution domain. Which solution will deploy the certificate without incurring additional costs?
Choose an answer
Tap an option to check your answer.
Correct answer: Request an Amazon issued public certificate from AWS Certificate Manager (ACM) in the us-east-1 Region..
Why this is the answer
For CloudFront distributions, you must provision SSL/TLS certificates using AWS Certificate Manager (ACM) in the US East (N. Virginia) region (us-east-1). This is a specific requirement for CloudFront to properly associate the certificate with your distribution. Public certificates issued by ACM are free of charge, making this a cost-effective solution. Private certificates from ACM are a paid service and are typically used for internal applications or private networks, not for public-facing CloudFront distributions. Requesting a certificate in any other region (e.g., us-west-1) will prevent CloudFront from recognizing and using it.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed