ANS-C01 Question 291
Single answerYour organization uses an Amazon Route 53 private hosted zone for internal DNS resolution within a VPC and has recently established a hybrid architecture with an on-premises data center. The on-premises network has its own DNS server. You need to ensure that DNS queries for a specific subdomain (e.g., 'onprem.example.com') are forwarded to the on-premises DNS server while all other DNS queries are resolved within the AWS environment. How can you achieve this?
- A
Create a Route 53 Resolver inbound endpoint in the VPC and configure a forwarding rule for 'onprem.example.com' to point to the on-premises DNS server.
- B
Use an Amazon Route 53 Resolver rule to forward queries for 'onprem.example.com' to the on-premises DNS server.
- C
Create a Route 53 Resolver outbound endpoint in the VPC and configure a forwarding rule for 'onprem.example.com' to point to the on-premises DNS server.
- D
Modify the Route 53 private hosted zone to include a record set for 'onprem.example.com' that points to the IP address of the on-premises DNS server.
Show answer and explanation
Correct answer: C
Explanation
In a hybrid environment, you can use Amazon Route 53 Resolver to forward specific DNS queries to an on-premises DNS server. To achieve this, a Route 53 Resolver outbound endpoint must be created in the VPC, and forwarding rules can be configured to direct queries for specific subdomains (e.g., 'onprem.example.com') to the on-premises DNS server. This setup ensures seamless DNS resolution for both AWS and on-premises resources.
- A. Incorrect.
This is not correct because an inbound endpoint allows on-premises DNS servers to resolve names in VPCs, but it does not allow conditional forwarding from the VPC to on-premises DNS servers.
- B. Incorrect.
This is not correct because while Route 53 Resolver rules are used for forwarding, they require an outbound endpoint to forward DNS queries to external DNS servers.
- C. Correct.
This is correct because a Route 53 Resolver outbound endpoint is required to forward DNS queries to external DNS servers such as the on-premises DNS server. A forwarding rule can then be created to direct specific subdomain queries (e.g., 'onprem.example.com') to the on-premises DNS server.
- D. Incorrect.
This is incorrect because creating a record set in the private hosted zone would not enable conditional forwarding. This approach statically points to an IP address but does not forward DNS queries for the subdomain to the on-premises DNS server.