A windows machine in one VPC needs to join the AD domain in another VPC. VPC Peering has been established. But the domain join does not work. Which of the following steps would you check to ensure that the AD domain join can work as intended?

Answer options:

A.Change the VPC peering connection to a VPN connection.
B.Change the VPC peering connection to a Direct Connect connection.
C.Ensure the security group of the AD server has the right rule to allow the incoming traffic.
D.Ensure that the AD is placed in a public subnet.

Answer – C
Options A and B are incorrect because changing the connection type does not help.
Option C is CORRECT because, in addition to VPC peering and setting the right route tables, the security group of the AD EC2 instance needs to have the right rule to allow incoming traffic.
Option D is incorrect because the AD should not be placed in a public subnet.
For more information on allowing ingress traffic for AD, please visit the following URL:
https://docs.aws.amazon.com/quickstart/latest/active-directory-ds/ingress.html