SAP-C02 Question 27
Single answerA company has a hybrid cloud architecture with workloads running both on-premises and in AWS. The company wants to use a unified DNS solution to resolve domain names for resources in its VPCs and on-premises network. They also want DNS queries originating on-premises to resolve AWS private hosted zone records without modifying their on-premises DNS servers. Which solution will meet these requirements?
- A
Configure an Amazon Route 53 Resolver inbound endpoint and update the on-premises DNS server to forward DNS queries for the private hosted zone to the Resolver inbound endpoint.
- B
Create an Amazon Route 53 Resolver outbound endpoint and configure it to forward DNS queries to the on-premises DNS server.
- C
Set up an Amazon Route 53 private hosted zone and associate it with the VPCs, then configure the on-premises DNS server with a conditional forwarder pointing to the VPC CIDR range.
- D
Use AWS Direct Connect to route all DNS queries from on-premises to the Amazon Route 53 Resolver in the VPC.
Show answer and explanation
Correct answer: A
Explanation
To enable on-premises DNS servers to resolve DNS records in a Route 53 private hosted zone, an Amazon Route 53 Resolver inbound endpoint must be configured. This allows on-premises DNS servers to forward DNS queries to the Resolver, which can then resolve the private hosted zone records. Other options either misunderstand the purpose of outbound endpoints, lack the necessary configuration for hybrid DNS, or misinterpret the role of AWS Direct Connect in DNS resolution.
- A. Correct.
Correct: Configuring an Amazon Route 53 Resolver inbound endpoint allows on-premises DNS servers to forward DNS queries for AWS private hosted zones to the Resolver inbound endpoint, enabling seamless name resolution for AWS resources.
- B. Incorrect.
Incorrect: An outbound endpoint is used for forwarding DNS queries originating from the VPC to on-premises DNS servers, not the other way around.
- C. Incorrect.
Incorrect: Simply associating a private hosted zone with the VPC does not allow on-premises DNS servers to resolve records in that zone unless a Resolver inbound endpoint is configured.
- D. Incorrect.
Incorrect: AWS Direct Connect provides a private network connection but does not inherently handle DNS query forwarding or integration.