ANS-C01 Question 48
Select 3Your organization has a hybrid cloud environment with on-premises resources connected to AWS through a Direct Connect link. The organization uses multiple AWS accounts and operates in multiple AWS Regions. You are tasked with setting up DNS resolution for both on-premises and AWS resources while ensuring low-latency access and minimal operational overhead. How can you achieve this using Amazon Route 53?
- A
Use Route 53 Resolver endpoints to enable bi-directional DNS resolution between on-premises and AWS VPC resources.
- B
Configure a Route 53 private hosted zone in one AWS account and share it with other AWS accounts using Resource Access Manager (RAM).
- C
Create a public hosted zone in Route 53 for internal DNS resolution across AWS Regions and on-premises resources.
- D
Deploy Route 53 Resolver forwarding rules in each VPC to forward DNS queries for on-premises domains.
- E
Use Route 53 cross-region failover routing policy to direct traffic between AWS Regions and on-premises resources.
Show answer and explanation
Correct answers: A, B, D
Explanation
In a hybrid, multi-account, and multi-Region setup, Route 53 Resolver endpoints enable seamless DNS resolution between on-premises networks and AWS VPCs. Private hosted zones shared via Resource Access Manager reduce operational overhead by avoiding duplication across accounts. Forwarding rules in Route 53 Resolver allow on-premises DNS queries to be directed appropriately. Public hosted zones and cross-region failover routing policies are not suitable for internal DNS resolution requirements.
- A. Correct.
Correct. Route 53 Resolver endpoints allow bi-directional DNS resolution between on-premises networks and AWS VPCs. This is essential for hybrid environments.
- B. Correct.
Correct. Private hosted zones shared using AWS Resource Access Manager enable DNS resolution across multiple AWS accounts without duplicating hosted zones.
- C. Incorrect.
Incorrect. Public hosted zones are intended for external DNS resolution and are not suitable for internal DNS needs across hybrid environments.
- D. Correct.
Correct. Forwarding rules in Route 53 Resolver can direct DNS queries for on-premises domains to the appropriate on-premises DNS servers.
- E. Incorrect.
Incorrect. Cross-region failover routing policy is used for disaster recovery or failover scenarios, not for internal DNS resolution.