You manage the IT users for a large organization that is moving many services to AWS. You want a seamless way for your employees to log in and use cloud services. You also want to use AWS Managed Microsoft AD and have been asked if users can use it to access services in the on-premises environment. What would you respond?

Answer options:

A.AWS Managed Microsoft AD requires data synchronization and replication to work properly.
B.AWS Managed Microsoft AD can only be used for cloud or on-premises environments, not both.
C.AWS Managed Microsoft AD can be used as the Active Directory over VPN or Direct Connect.
D.AWS Managed Microsoft AD is 100% the same as Active Directory running on separate EC2 instance.

Correct Answer: C
Option C is correct. Because you want to use AWS Managed Microsoft AD, you want to be certain that your users can use the AWS cloud resources and services in your on-premise environment. To make your company have connectivity for AWS services, once you implement VPN or Direct Connect, your AWS Managed Microsoft AD can be used for both cloud services and on-premises services.
Option A is incorrect. To access on-premises resources through AWS Managed Microsoft AD, synchronization or replication is not needed.
Option B is incorrect. AWS Managed Microsoft AD can be used for both. It’s not one or the other.
Option D is incorrect. AWS Managed Microsoft AD being a managed service limits some capabilities versus running Active Directory by itself on EC2 instances.
For more information, please visit the URLs below:
https://aws.amazon.com/directoryservice/
https://docs.aws.amazon.com/directoryservice/latest/admin-guide/what_is.html