Which solution will address these requirements?

An organization uses Microsoft Active Directory (AD) for service authentication in their private cloud. They want to use the same authentication source for services in the public cloud. External employees access services in both clouds and need to authenticate with AD. The organization wants to minimize and secure network traffic.

Which solution will address these requirements?
A . Connect the two clouds through IPsec VPN.
Place AD controllers in the private cloud only.
B . Connect the two clouds through IPsec VPN.
Place AD controllers in the private and public clouds.
C . Configure perimeter firewalls to allow AD traffic.
Place AD controllers in the private and public clouds.
D . External users connect with IPsec VPN.
Place AD controllers in the private cloud only.

Answer: B