Drag or tap steps into the slots.
Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5
SCS-C02 Infrastructure Security Practice Question
Drag and drop the steps to set up AWS Certificate Manager (ACM) for a custom domain in the correct order.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Request certificate, Validate domain ownership via DNS, Issue certificate, Associate certificate with AWS resource
ACM certificate requires request, DNS validation, issuance, association, and automatic renewal.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Request certificate, Validate domain ownership via DNS, Issue certificate, Associate certificate with AWS resource
Why this is correct
This is the correct order because you must first request the certificate, then validate ownership of the domain (typically via DNS), after which AWS issues the certificate, and finally you associate it with the desired resource (e.g., CloudFront or ALB).
- ✗
Validate domain ownership via DNS, Request certificate, Issue certificate, Associate certificate with AWS resource
Why it's wrong here
Domain ownership validation cannot precede the certificate request because ACM generates the DNS validation CNAME token only after you submit the request. Without the request, there are no tokens to place in DNS, and ACM has no pending certificate to validate. Therefore the sequence is invalid from the start.
- ✗
Request certificate, Issue certificate, Validate domain ownership via DNS, Associate certificate with AWS resource
Why it's wrong here
ACM does not issue a certificate while domain ownership is still unproven. A requested certificate remains in Pending validation status until ACM detects the required DNS CNAME record (or you respond to email validation), and only then does the status change to Issued. Placing issuance before validation contradicts ACM's state machine.
- ✗
Request certificate, Validate domain ownership via DNS, Associate certificate with AWS resource, Issue certificate
Why it's wrong here
A certificate cannot be associated with an AWS resource until ACM has moved it to the Issued state. If you attempt to associate a certificate that is still in Pending validation, ACM returns an error. Once validation succeeds ACM issues the certificate automatically, so placing Associate before Issue inverts the dependency.
Go deeper
Related to this question
About these practice questions
This SCS-C02 question is part of Courseiva's 1,205-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SCS-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SCS-C02 exam.