You are designing an SSUTLS solution that requires HTTPS clients to be authenticated by the Web server
using client certificate authentication. The solution must be resilient.
Which of the following options would you consider for configuring the web server infrastructure? (Choose 2
answers)
A.
Configure ELB with TCP listeners on TCP/443. And place the Web servers behind it.
B.
Configure your Web servers with EIPs. Place the Web servers in a Route53 Record Set and configure
health checks against all Web servers.
C.
Configure ELB with HTTPS listeners, and place the Web servers behind it.
D.
Configure your web servers as the origins for a CloudFront distribution. Use custom SSL certificates on your
CloudFront distribution.
A,B
CD
C,D
A,B – “Using client certificates” = the connections need to terminate on the instances, not ELB or cloudfront.