AWS Certified Data Analytics – Specialty — Question 13

A financial company hosts a data lake in Amazon S3 and a data warehouse on an Amazon Redshift cluster. The company uses Amazon QuickSight to build dashboards and wants to secure access from its on-premises Active Directory to Amazon QuickSight.
How should the data be secured?

Answer options

• A. Use an Active Directory connector and single sign-on (SSO) in a corporate network environment.
• B. Use a VPC endpoint to connect to Amazon S3 from Amazon QuickSight and an IAM role to authenticate Amazon Redshift.
• C. Establish a secure connection by creating an S3 endpoint to connect Amazon QuickSight and a VPC endpoint to connect to Amazon Redshift.
• D. Place Amazon QuickSight and Amazon Redshift in the security group and use an Amazon S3 endpoint to connect Amazon QuickSight to Amazon S3.

Correct answer: A

Explanation

The correct answer is A because using an Active Directory connector and SSO allows for secure authentication and streamlined access management for users from the corporate network. Options B, C, and D do not address the requirement for integrating on-premises Active Directory with Amazon QuickSight for secure access.