A Company Is Deploying a Public-Facing Global Application on AWS

Multiple Choice

A company is deploying a public-facing global application on AWS using Amazon CloudFront. The application communicates with an external system. A solutions architect needs to ensure the data is secured during end-to-end transit and at rest. Which combination of steps will satisfy these requirements? (Choose three.)

A) Create a public certificate for the required domain in AWS Certificate Manager and deploy it to CloudFront, an Application Load Balancer, and Amazon EC2 instances.
B) Acquire a public certificate from a third-party vendor and deploy it to CloudFront, an Application Load Balancer, and Amazon EC2 instances.
C) Provision Amazon EBS encrypted volumes using AWS KMS and ensure explicit encryption of data when writing to Amazon EBS.
D) Provision Amazon EBS encrypted volumes using AWS KMS.
E) Use SSL or encrypt data while communicating with the external system using a VPN.
F) Communicate with the external system using plaintext and use the VPN to encrypt the data in transit.