AWS Certified Advanced Networking - Specialty ANS-C01Demo

By Amazon · Question Mode

QuestionQ71

Network Design

A company is migrating an application from on premises to AWS. The company will host the application on Amazon EC2 instances deployed in a single VPC. During the migration period, DNS queries from the EC2 instances must resolve the names of on-premises servers. The migration is expected to last 3 months. After that 3-month migration period, resolving on-premises servers will no longer be necessary.

What should a network engineer do to meet these requirements with the LEAST configuration?

  • A Set up an AWS Site-to-Site VPN connection between on premises and AWS. Deploy an Amazon Route 53 Resolver outbound endpoint in the Region that is hosting the VPC.
  • B Set up an AWS Direct Connect connection with a private VIF. Deploy an Amazon Route 53 Resolver inbound endpoint and a Route 53 Resolver outbound endpoint in the Region that is hosting the VPC.
  • C Set up an AWS Client VPN connection between on premises and AWS. Deploy an Amazon Route 53 Resolver inbound endpoint in the VPC.
  • D Set up an AWS Direct Connect connection with a public VIF. Deploy an Amazon Route 53 Resolver inbound endpoint in the Region that is hosting the VPC. Use the IP address that is assigned to the endpoint for connectivity to the on-premises DNS servers.
Explanation

A Route 53 Resolver outbound endpoint conditionally forwards DNS queries originating in a VPC to DNS resolvers on a connected on-premises network. AWS Site-to-Site VPN supplies suitable temporary private connectivity and is simpler to provision for a three-month migration than Direct Connect. Inbound Resolver endpoints are for DNS queries that originate on-premises and need resolution in a VPC, which is the opposite traffic direction.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!