ANS-C01 Question 50
Select 3Your company has a hybrid cloud setup with AWS and on-premises infrastructure. You have multiple AWS accounts and require DNS resolution across a multi-Region architecture. You are tasked with enabling seamless DNS resolution between on-premises systems and AWS workloads in a way that minimizes latency and ensures high availability. Which combination of actions should you take to achieve this?
- A
Use AWS Route 53 Resolver to configure conditional forwarding rules for DNS queries from on-premises systems to private hosted zones in AWS.
- B
Configure a Route 53 public hosted zone for internal DNS resolution between AWS Regions and the on-premises environment.
- C
Deploy Route 53 Resolver endpoints in each AWS Region to forward DNS queries to on-premises resolvers.
- D
Use AWS Transit Gateway to propagate DNS traffic between AWS Regions and on-premises environments.
- E
Leverage Route 53 cross-account and cross-Region private hosted zone associations to enable DNS resolution across AWS accounts and Regions.
Show answer and explanation
Correct answers: A, C, E
Explanation
To establish seamless DNS resolution in a hybrid, multi-account, and multi-Region setup, you must combine AWS Route 53 Resolver for forwarding on-premises DNS queries, deploy Resolver endpoints in each Region, and use Route 53 private hosted zone associations for cross-account and cross-Region configurations. Public hosted zones and AWS Transit Gateway are not relevant for internal or hybrid DNS resolution.
- A. Correct.
Correct: AWS Route 53 Resolver allows conditional forwarding rules to route DNS queries from on-premises systems to AWS private hosted zones, enabling hybrid DNS resolution.
- B. Incorrect.
Incorrect: Route 53 public hosted zones are not intended for internal DNS resolution; they are used for public-facing DNS records.
- C. Correct.
Correct: Deploying Route 53 Resolver endpoints in each Region allows DNS queries to be forwarded between AWS and on-premises environments.
- D. Incorrect.
Incorrect: AWS Transit Gateway is a networking service and is not directly used for DNS traffic propagation. DNS-specific solutions are better suited.
- E. Correct.
Correct: Route 53 private hosted zone associations support both cross-account and cross-Region configurations, enabling seamless DNS resolution across AWS accounts and Regions.