An IT firm has Active Directory (AD) at the on-premises location. They are planning to migrate some of the servers to the AWS cloud and having hybrid connectivity built. IT Team is looking to set up an AD within AWS cloud which should have two-way forest trust relation with on-premises AD. This AD should be a primary AD for all future nodes deployed in the AWS cloud. AD should be set up with the least cost and minimum admin work.
Which of the following can be set up to meet the requirement?

Answer options:

A.AD Connector
B.AWS Managed Microsoft AD
C.Microsoft AD on Amazon EC2 instance
D.Simple AD

Correct Answer: B
AWS Managed Microsoft AD can be used to provide a managed AD within the AWS cloud. This can be used for managing users locally within the AWS cloud. It can establish a two-way forest trust relationship with on-premises AD.Option A is incorrect as AD Connector supports replication with on-prem AD. It does not support two-way with on-prem AD.Option C is incorrect as Microsoft AD on Amazon EC2 instance can be used to create a replica of on-prem AD in AWS cloud. But it will not support two-way trust relations with on-prem AD. Also, this will require additional admin work for managing AD on Amazon EC2 instances.
Option D is incorrect as Simple AD cannot be joined with on-premises AD.For more information on AWS Directory Service, refer to the following URL,
https://aws.amazon.com/directoryservice/faqs/