Exam AWS Certified SysOps Administrator - Associate All Questions

View all questions & answers for the AWS Certified SysOps Administrator - Associate exam

Exam AWS Certified SysOps Administrator - Associate topic 1 question 258 discussion

Exam question from Amazon's AWS Certified SysOps Administrator - Associate

Question #: 258
Topic #: 1

[All AWS Certified SysOps Administrator - Associate Questions]

A company's VPC has connectivity to an on-premises data center through an AWS Site-to-Site VPN. The company needs Amazon EC2 instances in the VPC to send DNS queries for example.com to the DNS servers in the data center.

Which solution will meet these requirements?

A. Create an Amazon Route 53 Resolver inbound endpoint. Create a conditional forwarding rule on the on-premises DNS servers to forward DNS requests for example.com to the inbound endpoints.
B. Create an Amazon Route 53 Resolver inbound endpoint. Create a forwarding rule on the resolver that sends all queries for example.com to the on-premises DNS servers. Associate this rule with the VPC.
C. Create an Amazon Route 53 Resolver outbound endpoint. Create a conditional forwarding rule on the on-premises DNS servers to forward DNS requests for example.com to the outbound endpoints.
D. Create an Amazon Route 53 Resolver outbound endpoint. Create a forwarding rule on the resolver that sends all queries for example.com to the on-premises DNS servers. Associate this rule with the VPC.

Show Suggested Answer

Suggested Answer: D 🗳️

by csG13 at March 9, 2023, 9:05 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

csG13

Highly Voted 1 year, 11 months ago

Selected Answer: D

D - since we want to forward DNS queries to an on-prem DNS server, we need to create a Route53 outbound resolver endpoint. The last step of the configuration process it to associate the rule with a VPC (not necessarily the same where we created the outbound endpoint). https://aws.amazon.com/premiumsupport/knowledge-center/route53-resolve-with-outbound-endpoint/

upvoted 13 times

...

March2023

Most Recent 11 months, 2 weeks ago

Selected Answer: D

https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resolver-forwarding-outbound-queries.html

upvoted 2 times

...

TareDHakim

1 year, 1 month ago

Selected Answer: D

Agree with D.

upvoted 2 times

...

konieczny69

1 year, 2 months ago

why not C?

upvoted 1 times

konieczny69

1 year, 2 months ago

my bad, the rule must be on the route53 resolver

upvoted 1 times

...

DeaconStJohn

1 year, 3 months ago

Selected Answer: D

outbound as traffic is outbound. C: on prem to inbound resolver doesn't make too much sense. D: AWS resolver to on prem server makes sense

upvoted 2 times

...

yuya3

1 year, 4 months ago

Obviously D, this asks a DNS query from EC2 instances to on-prem DNS servers therefore creating outbound resolver endpoint is a way to meet the requirement.

upvoted 2 times

...

xSohox

1 year, 6 months ago

Selected Answer: D

It is D. Because we need outbound endpoint to forward requests to DNS servers in the data center.

upvoted 2 times

...

backfringe

1 year, 6 months ago

Selected Answer: B

B since you need an inbound endpoint to receive dns query from the vpc and to forward queries to on-premises

upvoted 2 times

...

Vivec

1 year, 11 months ago

Selected Answer: B

An inbound endpoint in Amazon Route 53 Resolver receives DNS queries from resources in your VPC and forwards them to the DNS resolvers that are defined in the inbound endpoint. This is the reason why an inbound endpoint with a forwarding rule should be created to allow EC2 instances in the VPC to send DNS queries for example.com to the DNS servers in the on-premises data center.

upvoted 3 times

Vivec

1 year, 11 months ago

In this case, the requirement is for Amazon EC2 instances in the VPC to send DNS queries for example.com to the DNS servers in the on-premises data center. Therefore, an inbound endpoint in Amazon Route 53 Resolver is needed, which will allow the DNS queries from the EC2 instances to be resolved by the on-premises DNS servers.

upvoted 2 times

Vivec

1 year, 11 months ago

Asnwer is D, I stand corrected. Big mistake by me, sorry for the confusion every1. Miscalculation on my side. Here is 1 more link to support Answer D https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resolver-overview-DSN-queries-to-vpc.html#resolver-choose-vpc

upvoted 6 times

...