Practice Test 1 | AWS Certified Cloud Practitioner | CLF-C01 | Dumps | Mock Test

Correct Answer: B

AWS CloudHSM is a managed hardware security model for generating and managing encryption keys on the AWS cloud. AWS CloudHSM can be used for offloading SSL processing for web servers. In this case , SSL processing is done on AWS CloudHSM instead of web servers which reduces load on web servers.

• Option A is incorrect as AWS Certificate Manager can be used to store & provision SSL/TLS certificates.
• Option C is incorrect as AWS KMS is a managed service for encrypting data. It cannot be used for offloading SSL processing for web servers.
• Option D is incorrect as AWS Secrets Manager can be used to implement password rotation policy for secrets stored.It can also be used to manage & retrieve credentials/ secrets which an application can use during its lifecycle. AWS Secrets Manager is not suitable for offloading SSL processing.

For more information on AWS CloudHSM, refer to the following URL,

• https://aws.amazon.com/cloudhsm/