Amazon Web Services SAP-C02 Exam With Confidence Using Practice Dumps

A is the correct answer because it uses AWS Directory Service for Microsoft Active Directory to join the Windows EC2 instances to an Active Directory domain on AWS and enable MFA. AWS Directory Service for Microsoft Active Directory, also known as AWS Managed Microsoft AD, is a fully managed service that is powered by Windows Server 2019. It allows you to run directory-aware workloads in the AWS Cloud, including Microsoft SharePoint and custom .NET and SQL Server-based applications. You can also configure a trust relationship between AWS Managed Microsoft AD in the AWS Cloud and your existing on-premises Microsoft Active Directory. AWS Managed Microsoft AD supports MFA by integrating with your existing RADIUS-based MFA infrastructure. To join the Windows EC2 instances to an Active Directory domain on AWS, you can use an Amazon Workspace, which is a fully managed, secure desktop computing service that runs on AWS. You can connect to and use the Workspace for domain security configuration tasks. References:

The correct answer is A, C, and F. The company wants to host a private DNS namespace, myvpc.example.com, inside AWS and allow on-premises devices to resolve records in that namespace. A Route 53 private hosted zone is the correct hosted zone type because the domain is intended for private VPC resolution, not public internet DNS. To allow DNS queries from the on-premises network into AWS, Route 53 Resolver inbound endpoints are required. The on-premises DNS resolvers then need conditional forwarding rules that forward queries for myvpc.example.com to the IP addresses of the inbound Resolver endpoint. An outbound endpoint is used when AWS resources need to resolve DNS names hosted on premises. That is not the stated requirement here. A public hosted zone would expose records publicly and is not appropriate for private VPC DNS.

===============

The correct answer is A, D, and F. AWS AppFabric is designed to ingest and normalize audit logs from compatible SaaS applications into the Open Cybersecurity Schema Framework, which makes logs from different SaaS providers easier to analyze consistently. Amazon Security Lake centralizes security data from AWS sources and custom sources, including AppFabric. Therefore, SaaS audit logs, CloudTrail events, Amazon S3 data events, Amazon EKS audit logs, and VPC Flow Logs can be centralized in Security Lake. OpenSearch Ingestion can then move Security Lake data into Amazon OpenSearch Service, where dashboards can visualize user activity, IP addresses, email addresses, and access frequencies. Options B and C are weaker because they create custom log pipelines and dashboards instead of using managed security data normalization. Option E uses Redshift and QuickSight, but OpenSearch is the better fit for security investigation dashboards.

===============