A company’s security engineer is configuring AWS Single Sign-On (AWS SSO) to give employees the ability to access multiple AWS accounts that are part of an organization in AWS Organizations. Persistent network connectivity exists between the organization’s management account where AWS SSO is configured and an existing on-premises Active Directory instance. The security engineer wants to enable employee authentication by using the existing on-premises Active Directory instance. What is the MOST operationally efficient solution that meets these requirements?

Topic #: - All AWS Certified Security - Specialty Questions

A. Deploy the default AWS SSO user directory. Establish a two-way trust relationship between AWS SSO and the existing Active Directory instance.
B. Deploy an AWS managed Active Directory instance in the organization’s management account. Establish a two-way trust relationship with the existing Active Directory instance. Most Voted
C. Deploy a self-managed Active Directory instance in the organization’s management account. Establish a two-way trust relationship with the existing Active Directory instance.
D. Deploy an AWS managed Active Directory instance in the organization’s management account. Establish a one-way trust relationship with the existing Active Directory instance.

- Awsexamhub website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Suggested Answer:

Reference Material:

Suggested Answer:

Reference Material:

Share this post

Join the Discussion