A company is planning to move its on-premises workloads to AWS. They are planning to set up their own Active Directory setup on a set of EC2 Instances. They need to ensure that, for the time being, resources from their on-premises data center can access the Active Directory setup. Which of the following implementation steps need to be carried out? Choose 2 answers from the options given below.

Answer options:

A.Ensure that the Network ACLs have been set for allowing traffic.
B.Ensure that VPC Flow logs have been enabled.
C.Ensure that the Security Groups have been set for allowing traffic.
D.Ensure that the AD connector is in place.

Answer – A and C
This is mentioned in the AWS Documentation.
If you`re deploying and managing your own AD DS installation, domain controllers and member servers will require several security group rules to allow traffic for services such as AD DS replication, user authentication, Windows Time services, and Distributed File System (DFS), among others. You should also consider restricting these rules to specific IP subnets that are used within your VPC.Options B and D are incorrect since these are not key requirements for having the Active Directory setup in place.
For more information on ingress traffic for Active Directory, please visit the below URL
https://docs.aws.amazon.com/quickstart/latest/active-directory-ds/ingress.html