SAP-C02 Practice Question: Accelerate Workload Migration and Modernization
A company is migrating a legacy .NET application to AWS. The application uses Windows authentication and integrates with on-premises Active Directory. The company wants to use AWS Managed Microsoft AD to reduce administrative overhead. However, after migration, the application fails to authenticate users. What is the most likely cause?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The application is using NTLM authentication, which is not supported by AWS Managed Microsoft AD without a trust relationship.
The application likely uses NTLM or Kerberos authentication, which requires proper trust relationships between the AWS Managed Microsoft AD and the on-premises AD. Option A is wrong because security groups do not affect authentication protocols. Option B is wrong because AWS Managed Microsoft AD supports LDAP. Option C is wrong because DNS resolution is not the root cause.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The security group for the application servers does not allow inbound traffic on port 389.
Why it's wrong here
Port 389 is for LDAP, but authentication may use other ports.
- ✗
AWS Managed Microsoft AD does not support LDAP queries.
Why it's wrong here
AWS Managed Microsoft AD supports LDAP over SSL.
- ✗
The application is not configured to use the correct DNS servers for the AWS Managed Microsoft AD domain.
Why it's wrong here
DNS is typically correctly configured during setup.
- ✓
The application is using NTLM authentication, which is not supported by AWS Managed Microsoft AD without a trust relationship.
Why this is correct
NTLM requires a trust, and without it, authentication fails.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 1,660 original SAP-C02 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SAP-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SAP-C02 exam.