ANS-C01 Question 209
Select 2Your organization has deployed a hybrid cloud architecture. The on-premises network uses a private Active Directory-integrated DNS server. You have a VPC in AWS that needs to resolve on-premises DNS names and AWS-hosted private DNS names. How can you achieve this while ensuring minimal latency and high availability?
- A
Configure an AWS Route 53 Resolver inbound endpoint in the VPC and forward on-premises DNS queries to it.
- B
Set up an AWS Route 53 Resolver outbound endpoint in the VPC and configure conditional forwarding rules for on-premises DNS names.
- C
Deploy a custom DNS server in the VPC and configure it to forward DNS queries for on-premises names to the on-premises DNS server.
- D
Use AWS Route 53 Private Hosted Zones to resolve on-premises DNS names by associating the zones with the VPC.
- E
Use AWS Route 53 Resolver rules to forward DNS queries for on-premises names to the on-premises DNS server.
Show answer and explanation
Correct answers: B, E
Explanation
In a hybrid cloud setup, resolving both on-premises and AWS DNS names requires leveraging AWS Route 53 Resolver features. Configuring an outbound endpoint and conditional forwarding rules allows DNS queries for on-premises names to be forwarded to the on-premises DNS server. Additionally, Route 53 Resolver rules can be used to forward queries for specific domains, ensuring efficient and reliable DNS resolution.
- A. Incorrect.
Incorrect: An inbound endpoint is used to receive DNS queries from on-premises or external networks into the VPC, not for forwarding queries to on-premises DNS servers.
- B. Correct.
Correct: An outbound endpoint allows the VPC to forward DNS queries to an external DNS server (such as the on-premises DNS server). Conditional forwarding rules can be configured to ensure only specific queries are forwarded.
- C. Incorrect.
Incorrect: While a custom DNS server could theoretically forward queries to the on-premises DNS server, this approach introduces additional operational overhead and does not leverage the scalability and availability of Route 53 Resolver.
- D. Incorrect.
Incorrect: AWS Route 53 Private Hosted Zones are used to resolve DNS names within a VPC or associated VPCs. They cannot natively resolve on-premises DNS names.
- E. Correct.
Correct: Route 53 Resolver rules allow you to specify forwarding rules (e.g., for specific domain names) to external DNS servers, making it possible to resolve on-premises DNS names from the VPC.