An Organization Is Deploying an Application in a VPC That

question 364

Multiple Choice

An organization is deploying an application in a VPC that requires SSL mutual authentication with a client-side certificate, as that is the primary method of identifying clients. The Network Engineer has been tasked with defining the mechanism used within AWS to provide the SSL mutual authentication. Which of the following options meets the organization's requirements?

• A) Use a Classic Load Balancer and upload the client certificate private keys to it. Perform SSL mutual authentication of the client-side certificate there.
• B) Use a Network Load Balancer with a TCP listener on port 443, and pass the request through for the SSL mutual authentication to be handled by a backend instance.
• C) Use an Application Load Balancer and upload the client certificate private keys to it by using the native server name indication (SNI) features with smart certificate selection to handle multiple calling applications.
• D) Front the application with Amazon API Gateway, and use its client-side SSL mutual authentication feature that uses the backend instances to verify the source of the request.

---

Definitions:

Prospecting Cover Letter

A type of cover letter sent to inquire about potential job opportunities or to introduce oneself to a potential employer, even when no job has been advertised.

Unsolicited

Something not asked for and often unwanted, typically referring to communications or goods.

Employment

The condition of having paid work or being engaged in a profession or occupation.

Indirect Refusal Pattern

A communication strategy used to say no or decline a request in a polite and less direct manner.