Q276.A company is deploying a public-facing global application on AWS using Amazon CloudFront. The application communicates with an extemnal system. A solutions architect needs to ensure the data is secured during end-to- end transit
And at rest.Which combination of steps will satisfy these requirements? (Select THREE )
A.Create a public certificate for the required domain in AWS Certificate Manager and deploy it to CloudFront an Application Load Balancer and Amazon EC2 instances. B.Acquire a public certificate from a third-party vendor and deploy it to CloudFront an Application Load Balancer and Amazon EC2 instances. C.Provision Amazon EBS encrypted volumes using AWS KMS and ensure explicit encryption of data when writing to Amazon EBS. D.Provision Amazon EBS encrypted volumes using AWS KMS. E.Use SSL or encrypt data while communicating with the external system using a VPN. F.Communicate with the external system using plaintext and use the VPN to encrypt the data in transit.正确答案BDE
