A company needs to deploy virtual desktops to its customers in a virtual private cloud, leveraging existing
security controls. Which set of AWS services and features will meet the company’s requirements?
A.
Virtual Private Network connection. AWS Directory Services, and ClassicLink
B.
Virtual Private Network connection. AWS Directory Services, and Amazon Workspaces
C.
AWS Directory Service, Amazon Workspaces, and AWS Identity and Access Management
D.
Amazon Elastic Compute Cloud, and AWS Identity and Access Management
Explanation:
To enable integration, you need to ensure that your domain is reachable via an Amazon Virtual Private Cloud
VPC (this could mean that Active Directory domain controllers for your domain are running on Amazon EC2
instances, or that they are reachable via a VPN connection and are located in your on-premises network).
B
Virtual desktops = Workspaces and only B & C have it
And you won’t need IAM for users when using Directory Services so that rules out C
B. You will create an AD Connector back to on-prem for federated authentication.
B.
Virtual Private Network connection. AWS Directory Services, and ClassicLink –
(ClassicLink allows you to link an EC2-Classic instance to a VPC in your account, within the same region)
Virtual Private Network connection. AWS Directory Services, and Amazon Workspaces –
(WorkSpaces for Virtual desktops, and AWS Directory Services to authenticate to an existing on-premises AD through VPN)
AWS Directory Service, Amazon Workspaces, and AWS Identity and Access Management – (AD service needs a VPN connection to interact with an On-premise AD directory)
Amazon Elastic Compute Cloud, and AWS Identity and Access Management –
(Need WorkSpaces for virtual desktops)