ANS-C01 Question 28
Select 3Your company is running a hybrid infrastructure where the on-premises network and AWS resources need to share DNS resolution seamlessly. The on-premises network uses a custom DNS server, while the AWS environment uses Amazon Route 53. You are tasked with designing a DNS solution that allows on-premises systems to resolve AWS private hosted zone records and AWS resources to resolve on-premises domain records. Which combination of actions would meet these requirements?
- A
Set up an Amazon Route 53 Resolver inbound endpoint and configure forwarding rules on the on-premises DNS server to send requests for AWS private hosted zones to the endpoint.
- B
Set up an Amazon Route 53 Resolver outbound endpoint and configure forwarding rules in Route 53 Resolver for on-premises domains.
- C
Create a private hosted zone in Route 53 for the on-premises domain and manually populate it with records from the on-premises DNS server.
- D
Configure a VPN or Direct Connect connection between the on-premises network and AWS for secure DNS resolution traffic.
- E
Enable Route 53 DNS query logging to monitor DNS queries from on-premises systems.
Show answer and explanation
Correct answers: A, B, D
Explanation
To achieve seamless DNS resolution in a hybrid environment, you need bidirectional DNS query forwarding. The inbound endpoint allows on-premises systems to resolve AWS private hosted zone records, while the outbound endpoint forwards queries from AWS to the on-premises DNS server. A secure connection via VPN or Direct Connect ensures that DNS traffic between the environments is protected. Manually creating and maintaining private hosted zones for on-premises domains is not practical, and DNS query logging is useful for monitoring but does not enable the required functionality.
- A. Correct.
Correct: Setting up an inbound endpoint allows DNS queries from the on-premises network to be forwarded to Route 53 Resolver for resolving private hosted zone records in AWS.
- B. Correct.
Correct: Setting up an outbound endpoint allows Route 53 Resolver to forward DNS queries for on-premises domains to the on-premises DNS server.
- C. Incorrect.
Incorrect: Creating a private hosted zone for on-premises domains and manually populating it is inefficient, error-prone, and does not allow dynamic updates from the on-premises DNS server.
- D. Correct.
Correct: A VPN or Direct Connect connection is necessary to securely transmit DNS queries between the on-premises network and AWS.
- E. Incorrect.
Incorrect: Enabling DNS query logging is useful for monitoring but does not contribute to achieving seamless DNS resolution between on-premises and AWS environments.