A Security Engineer Must Implement Mutually Authenticated TLS Connections Between

question 104

Multiple Choice

A Security Engineer must implement mutually authenticated TLS connections between containers that communicate inside a VPC. Which solution would be MOST secure and easy to maintain?

• A) Use AWS Certificate Manager to generate certificates from a public certificate authority and deploy them to all the containers.
• B) Create a self-signed certificate in one container and use AWS Secrets Manager to distribute the certificate to the other containers to establish trust.
• C) Use AWS Certificate Manager Private Certificate Authority (ACM PCA) to create a subordinate certificate authority, then create the private keys in the containers and sign them using the ACM PCA API.
• D) Use AWS Certificate Manager Private Certificate Authority (ACM PCA) to create a subordinate certificate authority, then use AWS Certificate Manager to generate the private certificates and deploy them to all the containers.

---

Definitions:

Variable Overhead Efficiency Variance

This is the difference between the actual hours taken to produce something and the standard hours expected, multiplied by the variable overhead rate per hour.

Supplies Cost

The cost associated with materials and items that are consumed or used in the process of producing goods or providing services.

Machine-Hours

A measure of production output or capacity based on the number of hours a machine operates.

Variable Overhead Rate Variance

represents the difference between the actual variable overhead incurred and the standard variable overhead allocated for the actual production achieved.