An application is deployed as a docker image running on Amazon ECS. You use an Application Load Balancer to distribute the traffic to the ECS cluster. You want to terminate the SSL traffic in the ELB. How would you create and install the certificate for the Application Load Balancer? (SELECT TWO.)

Answer options:

A.Create the certificate in Amazon KMS and upload it to the ELB.B.Store the certificate and private key in the ELB through the ECS service.
C.Use the OpenSSL command to generate a certificate, upload it to IAM and configure ELB to use the certificate.
D.Request a certificate in ACM and configure the Application Load Balancer to use the certificate.
E.Use Amazon Fargate as the container compute engine. It offers native TLS security in the Application Load Balancer.

Answer: C and D
Option A is incorrect because KMS is used for the storage and management of data encryption keys and would not assist in creating a certificate in ELB.Option B is incorrect because the certificate of ELB is not configured through the ECS service.
Option C is CORRECT because you can use OpenSSL to generate certificates and upload the certificates to IAM/ACM for ELB.Option D is CORRECT because AWS Certificate Manager (ACM) can be used for creating and managing public SSL/TLS certificates.
Option E is incorrect because Amazon Fargate does not provide support for such functionality.
Reference:
https://docs.aws.amazon.com/elasticloadbalancing/latest/application/create-https-listener.html