Exam ANS-C00 All Questions

View all questions & answers for the ANS-C00 exam

Exam ANS-C00 topic 1 question 361 discussion

Exam question from Amazon's ANS-C00

Question #: 361
Topic #: 1

A company has a hybrid environment across its on-premises network and the AWS Cloud. The company wants to use Amazon Elastic File System (Amazon EFS) to store and share data between on-premises services that are required to resolve DNS queries through on-premises DNS servers. The company wants to use a custom domain name to connect to Amazon EFS. The company also wants to avoid using the Amazon EFS target IP address.
What should a network engineer do to meet these requirements?

A. Create an Amazon Route 53 Resolver outbound endpoint, and configure it for the VPC where Amazon EFS resides. Create a Route 53 public hosted zone, and add a new CNAME record with the value of the Amazon EFS DNS name. Configure forwarding rules on the on-premises DNS servers to forward queries for the custom domain host to the Route 53 public hosted zone.
B. Create an Amazon Route 53 Resolver inbound endpoint, and configure it for the VPC where Amazon EFS resides. Create a Route 53 private hosted zone, and add a new CNAME record with the value of the Amazon EFS DNS name. Configure forwarding rules on the on-premises DNS servers to forward queries for the custom domain host to the Route 53 Resolver.
C. Create an Amazon Route 53 Resolver outbound endpoint, and configure it for the VPC where Amazon EFS resides. Create a Route 53 private hosted zone, and add a new CNAME record with the value of the Amazon EFS DNS name. Configure forwarding rules on the on-premises DNS servers to forward queries for the custom domain host to the Route 53 Resolver.
D. Create an Amazon Route 53 Resolver inbound endpoint, and configure it for the VPC where Amazon EFS resides. Create a Route 53 private hosted zone, and add a new PTR record with the value of the Amazon EFS DNS name. Configure forwarding rules on the on-premises DNS servers to forward queries for the custom domain host to the Route 53 private hosted zone.

Show Suggested Answer

Suggested Answer: B 🗳️

by Alberto_M_M at Aug. 26, 2021, 9:39 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

mabalon

Highly Voted 3 years, 6 months ago

Selected Answer: B

B. We need forward queries from on-prem to AWS VPC, for that we need and inbound resolver

upvoted 7 times

...

[Removed]

Most Recent 2 years, 9 months ago

B For sure

upvoted 1 times

...

Marty2021

2 years, 11 months ago

Selected Answer: B

B - Agree with others comments on this, inbound as from on-prem servers, private zone not public

upvoted 1 times

...

sapien45

3 years, 2 months ago

I like that the question is expressed in clear terms, and reference current aws technos. r53 inbound resolver, inbound rules, forwarning rules on the on premises dns side

upvoted 1 times

...

kopper2019

3 years, 3 months ago

it is B, inbound and CNAME

upvoted 1 times

...

ouceanking

3 years, 5 months ago

I also agree B is the correct answer. The request is from on-premises DNS server to AWS Route 53. It should be inbound endpoint. And on the other hand, section A is using public hosted zone. This seems make no sense.

upvoted 1 times

...

manakw

3 years, 7 months ago

Agreed B. It has to be an inbound rule

upvoted 1 times

...

Alberto_M_M

3 years, 8 months ago

You have to select between these options: A: outbound endpoint, CNAME record B: inbound endpoint, CNAME record C: outbound endpoint, CNAME record D: inbound endpoint, PTR record You have to select inbound because the traffic enters from onprem.You have to select CNAME record. The answer is "B". https://www.ictshore.com/networking-fundamentals/dns-cname-ptr-records/ CNAME: CNAME does not translate names with IP addresses but translates names with names. And, unlike an URL redirect, CNAME is transparent to the user. PTR: Truth is, the role of a PTR (Pointer) record is astonishingly simple. It translates an IP address into a domain name.

upvoted 3 times

walkwolf3

3 years, 8 months ago

Agreed B The DNS server on the remote network to conditionally forward DNS queries for the private hosted zone’s domain name to the IP addresses of the inbound endpoint. The remote DNS server to forward DNS queries for the domain name instead of delegating authority of the domain name to the inbound endpoint. https://aws.amazon.com/premiumsupport/knowledge-center/route53-resolve-with-inbound-endpoint/

upvoted 1 times

...