DOP-C02 · Question #188
A company uses AWS Directory Service for Microsoft Active Directory as its identity provider (IdP). The company requires all infrastructure to be defined and deployed by AWS CloudFormation. A DevOps e
Sign in or unlock DOP-C02 to reveal the answer and full explanation for question #188. The question stem and answer options stay visible for context.
Question
A company uses AWS Directory Service for Microsoft Active Directory as its identity provider (IdP). The company requires all infrastructure to be defined and deployed by AWS CloudFormation. A DevOps engineer needs to create a fleet of Windows-based Amazon EC2 instances to host an application. The DevOps engineer has created a CloudFormation template that contains an EC2 launch template, IAM role, EC2 security group, and EC2 Auto Scaling group. The DevOps engineer must implement a solution that joins all EC2 instances to the domain of the AWS Managed Microsoft AD directory. Which solution will meet these requirements with the MOST operational efficiency?
Options
- AIn the CloudFormation template, create an AWS::SSM::Document resource that joins the EC2
- BIn the CloudFormation template, update the launch template to include specific tags that
- CStore the existing AWS Managed Microsoft AD domain connection details in AWS Secrets
- DStore the existing AWS Managed Microsoft AD domain administrator credentials in AWS Secrets
Unlock DOP-C02 to see the answer
You've previewed enough free DOP-C02 questions. Unlock DOP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.