Courseiva
Accelerate Workload Migration and ModernizationmediumMultiple ChoiceObjective-mapped

SAP-C02 Practice Question: Accelerate Workload Migration and Modernization

A company wants to migrate its on-premises Active Directory to AWS Managed Microsoft AD to support Windows-based workloads on AWS. The company has a complex Active Directory structure with multiple domains, group policies, and trusts with external directories. Which migration approach should the company use?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Establish a forest trust between the on-premises AD and AWS Managed Microsoft AD, then gradually move resources to AWS

Setting up a trust between the on-premises AD and AWS Managed Microsoft AD allows gradual migration of resources. This maintains existing authentication and group policies during the transition. Replacing AD with IAM is not suitable for Windows workloads. Replicating the entire AD structure via AD Connector is not possible. A full rebuild is complex and risky.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Replace Active Directory with AWS Identity and Access Management (IAM) for all authentication

    Why it's wrong here

    IAM is not a replacement for AD features like group policies and domain-joined machines.

  • Establish a forest trust between the on-premises AD and AWS Managed Microsoft AD, then gradually move resources to AWS

    Why this is correct

    Correct. A trust allows seamless coexistence and incremental migration.

  • Rebuild the entire Active Directory structure from scratch in AWS Managed Microsoft AD

    Why it's wrong here

    Rebuilding from scratch is error-prone and causes disruption.

  • Use AD Connector to proxy authentication requests from AWS to the on-premises AD

    Why it's wrong here

    AD Connector does not provide a full AD directory; it only proxies authentication.

About these practice questions

Courseiva writes every SAP-C02 question from scratch — 1,660 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This SAP-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SAP-C02 exam.