You have deployed a web application hosted in an Auto Scaling group in the ap-south-1 region. As the application has customers from different countries, you plan to use Amazon CloudFront to speed up the distribution of your dynamic web content to end-users.
The CloudFront distribution also needs to serve secure content over SSL/TLS. You already have a certificate installed in ACM in the ap-south-1 region. How would you associate the ACM certificate with the CloudFront distribution?

Answer options:

A.Request or import a new certificate in the us-east-1 (N. Virginia) region in ACM. Update the CloudFront distribution to use the certificate.
B.ACM can copy the certificate across AWS regions for CloudFront distributions. You can directly update the CloudFront distribution to use the certificate in ACM.
C.Use the AWS command-line to copy the certificate from ap-south-1 to us-east-1. Update the CloudFront distribution to use the certificate from the us-east-1 region.
D.In ACM, request or import a new certificate in every region where you want the CloudFront distribution to serve the clients. Configure the CloudFront distribution to use all the ACM certificates.

Answer: A
Option A is CORRECT because to use an ACM certificate with CloudFront, you must request or import the certificate in the US East (N. Virginia) region.
Option B is incorrect because ACM does not copy certificates from ap-south-1 to other regions. If an ACM certificate from us-east-1 is associated with a CloudFront distribution, the ACM certificate can be copied across AWS regions.
Option C is incorrect because AWS CLI does not allow copying an ACM certificate from one region to another.
Option D is incorrect because you do not need to create a new certificate in every region. Instead, you should create a certificate in the us-east-1 region and use that on CloudFront to serve the content globally.
Refer to the below snapshot for more details:Reference:
https://docs.aws.amazon.com/acm/latest/userguide/acm-services.html.
https://aws.amazon.com/certificate-manager/faqs/