AWS Certified Solutions Architect - Professional
Get started today
Ultimate access to all questions.
Comments
Loading comments...
Ultimate access to all questions.
A solutions architect at a company requires a cost-effective solution to enable secure Remote Desktop Protocol (RDP) access for users to Amazon EC2 Windows instances within a VPC. The solution must integrate with the company's on-premises Active Directory for centralized user management. The VPC is accessible via the internet, and the company possesses hardware capable of establishing an AWS Site-to-Site VPN connection. Which solution best fulfills these requirements?
A
Utilize AWS Directory Service for Microsoft Active Directory to deploy a managed Active Directory, establishing a trust relationship with the on-premises Active Directory. Set up an EC2 instance as a bastion host within the VPC, ensuring it is domain-joined. Employ the bastion host for RDP access to the target EC2 instances.
B
Integrate AWS IAM Identity Center (AWS Single Sign-On) with the on-premises Active Directory using AWS Directory Service's AD Connector. Set up permission sets for user groups to access AWS Systems Manager. Leverage Systems Manager Fleet Manager for RDP access to the target EC2 instances.
C
Establish a VPN connection between the on-premises environment and the target VPC. Ensure that the EC2 instances are domain-joined to the on-premises Active Directory via the VPN. Configure RDP access through the VPN to connect from the company's network to the target EC2 instances.
D
Deploy a managed Active Directory using AWS Directory Service for Microsoft Active Directory, and create a trust relationship with the on-premises Active Directory. Implement a Remote Desktop Gateway on AWS using an AWS Quick Start, ensuring it is domain-joined. Use the Remote Desktop Gateway for RDP access to the target EC2 instances.