Exam AWS Certified Solutions Architect - Professional SAP-C02 topic 1 question 322 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Professional SAP-C02

Question #: 322
Topic #: 1

[All AWS Certified Solutions Architect - Professional SAP-C02 Questions]

A company is migrating mobile banking applications to run on Amazon EC2 instances in a VPC. Backend service applications run in an on-premises data center. The data center has an AWS Direct Connect connection into AWS. The applications that run in the VPC need to resolve DNS requests to an on-premises Active Directory domain that runs in the data center.

Which solution will meet these requirements with the LEAST administrative overhead?

A. Provision a set of EC2 instances across two Availability Zones in the VPC as caching DNS servers to resolve DNS queries from the application servers within the VPC.
B. Provision an Amazon Route 53 private hosted zone. Configure NS records that point to on-premises DNS servers.
C. Create DNS endpoints by using Amazon Route 53 Resolver. Add conditional forwarding rules to resolve DNS namespaces between the on-premises data center and the VPC.
D. Provision a new Active Directory domain controller in the VPC with a bidirectional trust between this new domain and the on-premises Active Directory domain.

Show Suggested Answer

Suggested Answer: C 🗳️

by AM_aws at Oct. 29, 2023, 3:57 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

trungtd

Highly Voted 1 year ago

Option C: Amazon Route 53 Resolver with Conditional Forwarding Rules Least Administrative Overhead: This option leverages AWS-managed services to handle DNS resolution without the need to manage additional infrastructure or complicated configurations. Route 53 Resolver Endpoints: Create inbound and outbound endpoints to handle DNS queries between AWS and the on-premises environment. Inbound Endpoints: Allow on-premises systems to resolve DNS names hosted in AWS. Outbound Endpoints: Forward DNS queries from AWS to on-premises DNS servers. Conditional Forwarding Rules: Set up rules to forward specific domain queries (like your Active Directory domain) to the on-premises DNS servers. This ensures seamless DNS resolution for the applications in the VPC. B: Private hosted zones are intended for DNS records within AWS. A & D: too much overhead

upvoted 5 times

...

AzureDP900

Most Recent 7 months, 2 weeks ago

C is right The company needs to resolve DNS requests from EC2 instances in a VPC to an on-premises Active Directory domain that runs in a data center with an AWS Direct Connect connection. Amazon Route 53 Resolver is specifically designed for this use case, providing a secure way to enable name resolution between your on-premises and cloud-based resources. By using Route 53 Resolver, you can create DNS endpoints within the VPC that resolve DNS queries to the on-premises Active Directory domain without requiring any additional infrastructure or overhead in the data center.

upvoted 1 times

...

1 year, 8 months ago

I vote for C

upvoted 1 times

...

AM_aws

1 year, 8 months ago

Selected Answer: C

https://aws.amazon.com/blogs/security/how-to-set-up-dns-resolution-between-on-premises-networks-and-aws-using-aws-directory-service-and-amazon-route-53/

upvoted 3 times

...