SAP-C02 Question 26
Select 2An organization operates a hybrid cloud environment with applications running in both AWS and their on-premises data center. The on-premises network uses a custom DNS server for internal resolution, while AWS workloads rely on Amazon Route 53 for DNS. The organization wants to ensure seamless name resolution between AWS-hosted applications and on-premises services. How can this be achieved using Amazon Route 53 Resolver?
- A
Set up Amazon Route 53 Resolver inbound endpoints in the AWS VPC and configure on-premises DNS servers to forward queries to these endpoints.
- B
Set up Amazon Route 53 Resolver outbound endpoints in the AWS VPC and configure forwarding rules for on-premises domain names.
- C
Configure a Route 53 private hosted zone and associate it with both the AWS VPC and the on-premises network.
- D
Use Amazon Route 53 Resolver rules to forward queries for AWS-hosted domain names to the on-premises DNS server.
- E
Install a custom DNS server in the AWS VPC to handle queries from both AWS and on-premises networks.
Show answer and explanation
Correct answers: A, B
Explanation
To enable seamless DNS resolution in a hybrid environment, you need to use Amazon Route 53 Resolver endpoints. Inbound endpoints allow on-premises DNS servers to forward queries for AWS resources to Route 53 Resolver, while outbound endpoints enable the AWS VPC to forward DNS queries for on-premises domains to the on-premises DNS servers. Private hosted zones and custom DNS servers are not required for this setup.
- A. Correct.
Correct: Setting up inbound endpoints allows the on-premises DNS servers to forward queries for AWS resources to the Route 53 Resolver in the AWS VPC.
- B. Correct.
Correct: Outbound endpoints enable the Route 53 Resolver in the AWS VPC to forward queries to on-premises DNS servers, facilitating resolution of on-premises domain names.
- C. Incorrect.
Incorrect: Private hosted zones are used for DNS resolution within an AWS VPC or across VPCs but do not integrate directly with on-premises DNS servers.
- D. Incorrect.
Incorrect: Route 53 Resolver rules are used to forward queries to specific DNS targets like an on-premises DNS server, but this option incorrectly suggests forwarding AWS-hosted domain queries to on-premises DNS servers, which is not applicable here.
- E. Incorrect.
Incorrect: Installing a custom DNS server in the AWS VPC is unnecessary, as Route 53 Resolver already provides DNS resolution and forwarding capabilities for hybrid environments.