Exam AWS Certified SysOps Administrator - Associate topic 1 question 289 discussion

Exam question from Amazon's AWS Certified SysOps Administrator - Associate

Question #: 289
Topic #: 1

[All AWS Certified SysOps Administrator - Associate Questions]

A company has a hybrid environment. The company has set up an AWS Direct Connect connection between the company's on-premises data center and a workload that runs in a VPC. The company uses Amazon Route 53 for DNS on AWS. The company uses a private hosted zone to manage DNS names for a set of services that are hosted on AWS.

The company wants the on-premises servers to use Route 53 for DNS resolution of the private hosted zone.

Which solution will meet these requirements?

A. Create a Route 53 inbound endpoint. Ensure that security groups and routing allow the traffic from the on-premises data center. Configure the DNS server on the on-premises network to conditionally forward DNS queries for the private hosted zone's domain name to the IP addresses of the inbound endpoint.
B. Create a Route 53 outbound endpoint. Ensure that security groups and routing allow the traffic from the VPC. Configure the DNS server on the on-premises network to conditionally forward DNS queries for the private hosted zone’s domain name to the IP addresses of the outbound endpoint.
C. Edit the private hosted zone in Route 53 with a TXT record that references the on-premises DNS servers. Configure the DNS server on the on-premises network to conditionally forward DNS queries for the private hosted zone’s domain name to the base of the VPC CIDR IPv4 network range, plus two.
D. Edit the private hosted zone in Route 53 with a PTR record that references the on-premises DNS servers. Configure the DNS server on the on-premises network to conditionally forward DNS queries for the private hosted zone’s domain name to the base of the VPC CIDR IPv4 network range, plus two.

Show Suggested Answer

Suggested Answer: A 🗳️

by kondratyevmn at May 12, 2023, 2:44 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

kondratyevmn

Highly Voted 1 year, 1 month ago

Selected Answer: A

Inbound Resolver endpoints allow DNS queries to your VPC from your on-premises network or another VPC. https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resolver.html

upvoted 12 times

...

thetnyeinmoe

Most Recent 1 year, 1 month ago

Selected Answer: B

Explanation: By creating a Route 53 outbound endpoint, the on-premises servers can forward DNS queries for the private hosted zone's domain name to Route 53. This allows the on-premises servers to resolve DNS queries for the private hosted zone using Route 53's DNS resolution. The outbound endpoint provides a secure and efficient way for on-premises DNS resolution. A is incorrect because the inbound endpoint is used for receiving DNS queries from your on-premises network to resolve public DNS names. It is not suitable for resolving private hosted zone names. C and D are incorrect because editing the private hosted zone with TXT or PTR records does not enable the on-premises servers to use Route 53 for DNS resolution. The solution lies in using outbound endpoints for DNS resolution from on-premises servers.

upvoted 1 times

...