ANS-C01 Question 47
Select 3Your organization has a hybrid cloud architecture with applications deployed in multiple AWS Regions and an on-premises data center. You need to implement DNS resolution for internal applications across AWS accounts and Regions, as well as on-premises resources, while ensuring low latency and centralized management. Which combination of solutions should you use to achieve this?
- A
Use Amazon Route 53 Resolver endpoints to integrate with the on-premises DNS system.
- B
Configure a Route 53 private hosted zone and associate it with all relevant VPCs in every Region.
- C
Set up Route 53 Resolver rules to forward DNS queries to on-premises name servers.
- D
Create Route 53 geolocation routing policies for internal applications.
- E
Deploy a Route 53 public hosted zone for internal applications to centralize management.
Show answer and explanation
Correct answers: A, B, C
Explanation
To implement DNS resolution for a hybrid, multi-account, and multi-Region architecture, you should leverage Route 53 Resolver endpoints and rules for integrating with on-premises DNS systems, and use Route 53 private hosted zones for centralized management of internal DNS records across VPCs and Regions. Geolocation routing and public hosted zones are not appropriate for internal applications in this scenario.
- A. Correct.
Using Route 53 Resolver endpoints allows DNS queries to be forwarded between the on-premises DNS system and AWS, enabling seamless DNS resolution across hybrid environments.
- B. Correct.
Route 53 private hosted zones can centralize DNS management for internal applications and ensure resolution is restricted to specific VPCs in multiple Regions.
- C. Correct.
Route 53 Resolver rules enable forwarding of specific DNS queries (e.g., for on-premises domains) to on-premises DNS servers, supporting hybrid architectures.
- D. Incorrect.
Geolocation routing is used for directing traffic based on the geographic location of users, which is not relevant for internal DNS resolution in this hybrid scenario.
- E. Incorrect.
Public hosted zones are used for external DNS resolution and are not suitable for internal applications requiring restricted access.