ANS-C01 Question 310
Select 2Your company has a hybrid environment with applications running on-premises and in AWS. To resolve DNS queries from on-premises systems for AWS private hosted zones, you set up an AWS Route 53 Resolver outbound endpoint in the VPC. However, now your AWS-based applications need to resolve DNS queries for on-premises resources. What additional configuration should you implement to achieve this?
- A
Create a Route 53 Resolver inbound endpoint in the VPC and configure on-premises DNS servers to forward queries to it.
- B
Configure a Route 53 private hosted zone for on-premises domains and associate it with the VPC.
- C
Set up conditional forwarding rules in the Route 53 Resolver to forward on-premises domain queries to the on-premises DNS servers.
- D
Install an AWS-provided DNS server on-premises for seamless integration with the VPC DNS.
Show answer and explanation
Correct answers: A, C
Explanation
To enable bidirectional DNS resolution between on-premises systems and AWS VPC, you must set up both an inbound and outbound Route 53 Resolver endpoint. The inbound endpoint allows on-premises DNS servers to resolve AWS-specific queries, while the conditional forwarding rules ensure AWS-based applications can query on-premises resources. Without both components, DNS resolution between the environments will not be fully functional.
- A. Correct.
Correct. Creating a Route 53 Resolver inbound endpoint will allow on-premises DNS servers to forward their queries for both AWS private hosted zones and VPC-based resources.
- B. Incorrect.
Incorrect. While private hosted zones are useful for managing DNS inside AWS, they do not automatically resolve queries for on-premises resources unless explicitly configured.
- C. Correct.
Correct. Conditional forwarding rules in the Route 53 Resolver are necessary to ensure that queries for specific on-premises domains are forwarded to the on-premises DNS servers.
- D. Incorrect.
Incorrect. AWS does not provide a standalone DNS server for on-premises environments. Integration is achieved through Resolver endpoints and forwarding rules.