SAP-C02 Practice Question: Design Solutions for Organizational Complexity
A multinational corporation is migrating its on-premises Active Directory to AWS Managed Microsoft AD. The company has multiple VPCs in different AWS Regions, and all VPCs must be able to authenticate against the same directory. The directory must be highly available and support automatic failover. What is the MOST operationally efficient solution?
⚠ Common exam trap
Test-takers frequently confuse VPC peering or VPN connectivity as sufficient for high availability, overlooking that a single-Region directory is a single point of failure and that multi-Region replication is the only option that provides automatic failover and operational efficiency across Regions.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Deploy AWS Managed Microsoft AD in each Region using multi-Region replication. Configure the directory as a global directory.
AWS Managed Microsoft AD with multi-Region replication provides a single global directory that spans multiple Regions, enabling automatic failover and high availability. This is the most operationally efficient solution because it eliminates the need for complex networking (VPC peering or VPNs) and allows all VPCs to authenticate against the same directory natively, with replication handled by AWS.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use AWS Directory Service AD Connector in each VPC and point to an on-premises Active Directory.
Why it's wrong here
AD Connector proxies to on-premises AD; it does not provide a cloud-native directory.
- ✓
Deploy AWS Managed Microsoft AD in each Region using multi-Region replication. Configure the directory as a global directory.
Why this is correct
Multi-Region replication provides automatic failover and low-latency authentication in each Region.
- ✗
Deploy AWS Managed Microsoft AD in one Region. Create VPC peering connections to all other VPCs.
Why it's wrong here
VPC peering across Regions introduces cross-Region traffic and does not provide automatic failover.
- ✗
Deploy AWS Managed Microsoft AD in one Region. Configure VPN connections from each VPC to this directory.
Why it's wrong here
VPN adds latency and a single point of failure if the directory Region fails.
Go deeper
Related to this question
About these practice questions
Courseiva writes every SAP-C02 question from scratch — 1,660 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SAP-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SAP-C02 exam.