Exam AWS Certified SysOps Administrator - Associate topic 1 question 258 discussion

D - since we want to forward DNS queries to an on-prem DNS server, we need to create a Route53 outbound resolver endpoint. The last step of the configuration process it to associate the rule with a VPC (not necessarily the same where we created the outbound endpoint). https://aws.amazon.com/premiumsupport/knowledge-center/route53-resolve-with-outbound-endpoint/

https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resolver-forwarding-outbound-queries.html

Agree with D.

why not C?

outbound as traffic is outbound. C: on prem to inbound resolver doesn't make too much sense. D: AWS resolver to on prem server makes sense

Obviously D, this asks a DNS query from EC2 instances to on-prem DNS servers therefore creating outbound resolver endpoint is a way to meet the requirement.

It is D. Because we need outbound endpoint to forward requests to DNS servers in the data center.

B since you need an inbound endpoint to receive dns query from the vpc and to forward queries to on-premises

An inbound endpoint in Amazon Route 53 Resolver receives DNS queries from resources in your VPC and forwards them to the DNS resolvers that are defined in the inbound endpoint. This is the reason why an inbound endpoint with a forwarding rule should be created to allow EC2 instances in the VPC to send DNS queries for example.com to the DNS servers in the on-premises data center.