ANS-C01 Question 45
Select 2You are designing a DNS architecture for an application running in multiple Amazon VPCs across different regions. The application requires low-latency DNS resolution and needs to resolve domain names for resources in private subnets. Which combination of AWS services and configurations can fulfill these requirements?
- A
Configure Amazon Route 53 Private Hosted Zones associated with each VPC and enable VPC associations.
- B
Use Route 53 Resolver with inbound and outbound endpoints to resolve DNS queries across VPCs.
- C
Enable multi-region VPC peering between all VPCs for DNS resolution.
- D
Use Route 53 Geolocation routing to direct traffic to the nearest VPC.
- E
Enable Route 53 Resolver query logging for better DNS query monitoring.
Show answer and explanation
Correct answers: A, B
Explanation
To achieve low-latency private DNS resolution across multiple VPCs in different regions, Route 53 Private Hosted Zones should be associated with the relevant VPCs. Additionally, Route 53 Resolver with inbound and outbound endpoints facilitates DNS query resolution between VPCs. These services work together to meet the requirements for private and efficient DNS resolution across the architecture.
- A. Correct.
This is correct. Route 53 Private Hosted Zones can be associated with multiple VPCs, enabling private DNS resolution for resources within those VPCs. This is essential for low-latency and seamless DNS resolution for private resources.
- B. Correct.
This is correct. Route 53 Resolver allows DNS resolution across VPCs by setting up inbound and outbound endpoints, which is especially useful for multi-region architectures.
- C. Incorrect.
This is incorrect. VPC peering does not provide DNS resolution across VPCs by default. Even with peering, private DNS requires additional configurations like Private Hosted Zones or Route 53 Resolver.
- D. Incorrect.
This is incorrect. Route 53 Geolocation routing helps direct traffic based on the geographic location of the client but does not address private DNS resolution needs for VPC resources.
- E. Incorrect.
This is incorrect. While query logging can provide insights into DNS traffic, it does not contribute to meeting the DNS resolution requirements in this scenario.