Amazon Exam ANS-C01 Topic 7 Question 27 Discussion

Actual exam question for Amazon's ANS-C01 exam

Question #: 27
Topic #: 7

A company's AWS architecture consists of several VPCs. The VPCs include a shared services VPC and several application VPCs. The company has established network connectivity from all VPCs to the on-premises DNS servers.

Applications that are deployed in the application VPCs must be able to resolve DNS for internally hosted domains on premises. The applications also must be able to resolve local VPC domain names and domains that are hosted in Amazon Route 53 private hosted zones.

What should a network engineer do to meet these requirements?

ACreate a new Route 53 Resolver inbound endpoint in the shared services VPC. Create forwarding rules for the on-premises hosted domains. Associate the rules with the new Resolver endpoint and each application VPC. Update each application VPC's DHCP configuration to point DNS resolution to the new Resolver endpoint.

BCreate a new Route 53 Resolver outbound endpoint in the shared services VPC. Create forwarding rules for the on-premises hosted domains. Associate the rules with the new Resolver endpoint and each application VPC.

CCreate a new Route 53 Resolver outbound endpoint in the shared services VPCreate forwarding rules for the on-premises hosted domains. Associate the rules with the new Resolver endpoint and each application VPUpdate each application VPC's DHCP configuration to point DNS resolution to the new Resolver endpoint.

DCreate a new Route 53 Resolver inbound endpoint in the shared services VPC. Create forwarding rules for the on-premises hosted domains. Associate the rules with the new Resolver endpoint and each application VPC.

Show Suggested Answer

Suggested Answer: B

Creating a new Route 53 Resolver outbound endpoint in the shared services VPC would enable forwarding of DNS queries from the VPC to on-premises1.Creating forwarding rules for the on-premises hosted domains would enable specifying which domain names are forwarded to the on-premises DNS servers2.Associating the rules with the new Resolver endpoint and each application VPC would enable applying the rules to the VPCs2.This solution would not affect the default DNS resolution behavior of Route 53 Resolver for local VPC domain names and domains that are hosted in Route 53 private hosted zones3.

by Eleonore at May 19, 2024, 06:37 AM

Limited Time Offer

25%

Off

Get Premium ANS-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Alpha

6 months ago

A is the way to go, but I bet the network engineer is wishing they had a magic DNS wand instead of all these steps!

upvoted 0 times

...

Roxanne

6 months ago

B is like trying to resolve DNS with a carrier pigeon - it just won't work!

upvoted 0 times

...

Chantell

6 months ago

D is close, but I think A is the way to go. Gotta love that two-way Resolver action!

upvoted 0 times

Celia

5 months ago

Definitely, A is the way to go for setting up the Route 53 Resolver endpoints.

upvoted 0 times

...

Elmer

5 months ago

Yeah, A makes sense. It covers all the requirements for DNS resolution.

upvoted 0 times

...

Teresita

6 months ago

I agree, A seems like the best option here. Two-way Resolver action is key.

upvoted 0 times

...

6 months ago

upvoted 0 times

...

Elizabeth

6 months ago

B) Create a new Route 53 Resolver outbound endpoint in the shared services VPC. Create forwarding rules for the on-premises hosted domains. Associate the rules with the new Resolver endpoint and each application VPC.

upvoted 0 times

...

6 months ago

Yes, creating a new Route 53 Resolver inbound endpoint in the shared services VPC seems like the way to go.

upvoted 0 times

...

Gaynell

7 months ago

upvoted 0 times

...