PAS-C01 Migration Practice Question
A company is migrating a legacy .NET application to AWS. The application uses Windows Authentication and relies on Active Directory for user authentication. The company wants to minimize changes to the application code. Which AWS service should be used to integrate Active Directory with the migrated application?
⚠ Common exam trap
Candidates often confuse AD Connector with a full Active Directory service, not realizing that AD Connector only proxies LDAP queries and does not support Windows Authentication or Kerberos, which are essential for legacy .NET applications using integrated security.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
AWS Directory Service for Microsoft Active Directory
AWS Directory Service for Microsoft Active Directory is the correct choice because it provides a fully managed Microsoft Active Directory in the AWS cloud, which natively supports Windows Authentication and Kerberos-based authentication without requiring any code changes. This service allows the migrated .NET application to seamlessly integrate with the existing on-premises Active Directory through a trust relationship or by extending the directory directly into AWS, preserving the application's authentication logic.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
AWS Directory Service for Microsoft Active Directory
Why this is correct
Provides full managed AD with native support for Windows Authentication.
- ✗
Amazon Cognito
Why it's wrong here
Designed for web and mobile identity federation, not Windows Authentication.
- ✗
AD Connector
Why it's wrong here
Only proxies to on-premises AD, not suitable if on-prem AD is decommissioned.
- ✗
Simple AD
Why it's wrong here
Does not support Windows Authentication or many AD features needed.
Go deeper
Related to this question
About these practice questions
This PAS-C01 question is part of Courseiva's 1,616-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PAS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PAS-C01 exam.