ANS-C01 Question 286
Select 2You are designing the DNS architecture for a company that operates both an internal application accessible only to employees and a customer-facing website. The internal application is hosted in an Amazon VPC, and the customer-facing website is hosted on Amazon S3 with public access enabled. Which combination of hosted zones should you configure in Amazon Route 53 to meet the requirements?
- A
Use a private hosted zone for the internal application and associate it with the VPC.
- B
Use a public hosted zone for the internal application to allow employees to access it.
- C
Use a public hosted zone for the customer-facing website.
- D
Use a private hosted zone for the customer-facing website and associate it with the VPC.
- E
Use a public hosted zone for both the internal application and the customer-facing website.
Show answer and explanation
Correct answers: A, C
Explanation
To meet the requirements, the internal application should use a private hosted zone associated with the VPC to ensure it is accessible only by employees. The customer-facing website should use a public hosted zone to allow public users to resolve the DNS records and access the website. Private hosted zones are designed for DNS records that should only be resolvable within a specific VPC, while public hosted zones are used for resources that need to be accessible over the internet.
- A. Correct.
Correct. A private hosted zone is appropriate for the internal application because it ensures that the DNS records are only resolvable within the VPC, restricting access to employees.
- B. Incorrect.
Incorrect. A public hosted zone for the internal application would expose the records to the public internet, which is not suitable for an internal application restricted to employees.
- C. Correct.
Correct. A public hosted zone is required for the customer-facing website to make it accessible via the public internet.
- D. Incorrect.
Incorrect. A private hosted zone for the customer-facing website would restrict access to the VPC, preventing public users from accessing it.
- E. Incorrect.
Incorrect. Using a public hosted zone for both resources would expose the internal application to the public internet, violating the requirement for employee-only access.