SAP-C02 Question 29
Select 2Your organization has a hybrid environment with workloads running both in AWS and on-premises. The on-premises environment uses a private DNS server, while your AWS workloads are hosted in a VPC. You need to configure DNS resolution such that AWS-hosted resources can resolve on-premises domain names, and on-premises systems can resolve private domain names within the VPC. Which combination of steps should you take to enable this setup?
- A
Deploy an Amazon Route 53 Resolver inbound endpoint in the VPC and configure the on-premises DNS server to forward queries for VPC domains to this endpoint.
- B
Deploy an Amazon Route 53 Resolver outbound endpoint in the VPC and configure a forwarding rule to send queries for on-premises domains to the on-premises DNS server.
- C
Configure an Amazon Route 53 private hosted zone for the on-premises domain names and associate it with the VPC.
- D
Enable DNS resolution and DNS hostnames in the VPC settings to allow bidirectional name resolution.
- E
Create a rule in the Amazon Route 53 Resolver to allow the inbound endpoint to resolve queries for on-premises domains.
Show answer and explanation
Correct answers: A, B
Explanation
To enable hybrid DNS resolution, you need to use Amazon Route 53 Resolver endpoints. An inbound endpoint is required to allow on-premises systems to resolve private domain names hosted within AWS, while an outbound endpoint is needed to resolve on-premises domain names from AWS. Forwarding rules must be configured correctly for the outbound endpoint to direct queries to the appropriate on-premises DNS servers.
- A. Correct.
This step is correct because an inbound endpoint allows on-premises DNS servers to resolve private domain names hosted within a VPC. The on-premises DNS server must forward VPC domain queries to this endpoint.
- B. Correct.
This step is correct because an outbound endpoint is required to send DNS queries from the VPC to the on-premises DNS servers for resolving on-premises domain names.
- C. Incorrect.
This is incorrect because a private hosted zone in Amazon Route 53 is used to manage DNS within AWS, not to resolve on-premises domain names.
- D. Incorrect.
This is incorrect because enabling DNS resolution and DNS hostnames in the VPC only allows instances to resolve public and private DNS names within AWS. It does not facilitate hybrid DNS resolution.
- E. Incorrect.
This is incorrect because the rule configuration is handled in the outbound endpoint for forwarding queries and is not a feature of the inbound endpoint.