SAP-C02 Practice Question: Accelerate Workload Migration and Modernization
A company is migrating a legacy on-premises .NET application to AWS. The application uses Windows Authentication and relies on Active Directory. The company wants to minimize code changes. Which solution should the architect recommend?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Deploy the application on Amazon EC2 instances joined to an AWS Managed Microsoft AD directory.
Deploy the application on Amazon EC2 instances joined to an AWS Managed Microsoft AD directory. This allows the application to use Windows Authentication with minimal code changes because the EC2 instances are domain-joined, enabling the application to authenticate users against Active Directory as it did on-premises. Option A is incorrect because AWS Systems Manager Parameter Store or Secrets Manager can store credentials but does not provide Windows Authentication integration. Option B is incorrect because Amazon WorkDocs is a document sharing service, not a compute platform. Option C is incorrect because Amazon Cognito user pools are designed for external user identities, not for Windows Authentication against Active Directory.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use AWS Systems Manager to store credentials and inject them at runtime.
Why it's wrong here
Systems Manager Parameter Store does not provide Active Directory authentication capabilities.
- ✗
Migrate the application to Amazon WorkDocs and configure single sign-on.
Why it's wrong here
WorkDocs is a document management service, not suitable for running .NET applications.
- ✗
Use Amazon Cognito user pools for authentication.
Why it's wrong here
Cognito is designed for external identity providers and does not support Windows Authentication natively.
- ✓
Deploy the application on Amazon EC2 instances joined to an AWS Managed Microsoft AD directory.
Why this is correct
EC2 instances joined to Managed AD can use Windows Authentication with minimal changes.
Go deeper
Related to this question
About these practice questions
One of 1,660 original SAP-C02 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SAP-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SAP-C02 exam.