When provisioning a security certificate from AWS Certificate Manager (ACM), which of the following statements is true? Choose TWO.

Answer options:

A.ACM-issued security certificate cannot be applied to an Application load balancer.
B.To verify a security certificate, a CNAME record would need to be created.
C.Third-party security certificates cannot be applied to AWS resources.
D.To verify a security certificate, the administrator would need to acknowledge a verification email sent to an address of their choice.
E.A security certificate issued in ACM can only be applied to one AWS resource.

Correct Answer: B, D
There are two ways to validate and verify the issuance of a security certificate in AWS Certificate Manager. These are creating a CNAME record in the hosted zone of the domain or email confirmation sent to the requester`s email address.
https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-dns.html
https://docs.aws.amazon.com/acm/latest/userguide/gs-acm-validate-email.html
Option A is INCORRECT because it is possible to apply ACM-issued security certificates on the Application load balancer.
Option C is INCORRECT because AWS customers can upload third-party security certificates into ACM and manage and apply them to AWS resources.
Option E is INCORRECT because security certificates issued in ACM can be applied to multiple AWS resources.