AWS Certified Advanced Networking - Specialty ANS-C01Demo

By Amazon · Question Mode

QuestionQ132

Network Design

A company has established hybrid connectivity between its VPCs and its on-premises data center. The company has configured the on-premises.example.com subdomain on its DNS server in the on-premises data center. The company uses the aws.example.com subdomain for workloads running on AWS across multiple VPCs and accounts. Resources in both environments can reach each other by using IP addresses. The company wants workloads in the VPCs to access on-premises resources by using on-premises.example.com DNS names.

Which solution meets these requirements with the MINIMUM resource management?

  • A Create an Amazon Route 53 Resolver outbound endpoint. Configure a Resolver rule that conditionally forwards DNS queries for on-premises.example.com to the on-premises DNS server. Associate the rule with the VPCs.
  • B Create an Amazon Route 53 Resolver inbound endpoint and a Resolver outbound endpoint. Configure a Resolver rule that conditionally forwards DNS queries for on-premises.example.com to the on-premises DNS server. Associate the rule with the VPCs.
  • C Launch an Amazon EC2 instance. Install and configure BIND software to conditionally forward DNS queries for on-premises.example.com to the on-premises DNS server. Configure the EC2 instance's IP address as a custom DNS server in each VPC.
  • D Launch an Amazon EC2 instance in each VPC. Install and configure BIND software to conditionally forward DNS queries for on-premises.example.com to the on-premises DNS server. Configure the EC2 instance's IP address as a custom DNS server in each VPC.
Explanation

A Route 53 Resolver outbound endpoint enables VPC Resolver to forward DNS queries from one or more VPCs to DNS resolvers on a connected network. A forwarding rule for on-premises.example.com that targets the on-premises DNS server and is associated with the VPCs centrally provides the required resolution. An inbound endpoint serves the opposite direction—DNS queries originating on premises for VPC resources—and is unnecessary here.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!