Q60 — AWS SAA-C03 Ch.4

Question 60 of 105 | ← Chapter 4

Q255. A company wants to give a customer the ability to use on-premises Microsoft Active Directory to download files that are stored in Amazon S3. The customer's application uses an SFTP client to download the filesWhich solution will meet these requirements with the LEAST operational overhead and no changes to the customer's application?

• A. Set up AWS Transfer Family with SFTP for Amazon S3. Configure integrated Active Directory authentication ✓
• B. Set up AWS Database Migration Service (AWS DMS) to synchronize the on-premises client with Amazon S3. Configure integrated Active Directory authentication
• C. Set up AWS DataSync to synchronize between the on-premises location and the S3 location by using AWS IAM Identity Center (AWS Single Sign-On)
• D. Set up a Windows Amazon EC2 instance with SFTP to connect the on-premises client with Amazon S3.Integrate AWS Identity and Access Management (IAM)

Correct Answer: A. Set up AWS Transfer Family with SFTP for Amazon S3. Configure integrated Active Directory authentication

Explanation

AWS Transfer Family is a fully managed service that allows customers to transfer files over SFTP, FTPS, and FTP directly into and out of Amazon S3. It eliminates the need to manage any infrastructure for file transfer, which reduces operational overhead. Additionally, the service can be configured to use an existing Active Directory for authentication, which means that no changes need to be made to the customer's application.using AWS Batch to LEAST operational overheadand have SFTP to no changes to the customer's applicationhttps://aws.amazon.com/vi/blogs/architecture/managed-file-transfer-using-aws-transfer-family-and-amazon- s3/https://docs.aws.amazon.com/transfer/latest/userguide/directory-services-users.html