SAP-C02 Question 30
Select 2A company has a hybrid architecture with workloads running both on AWS and in its on-premises data centers. The company uses a centralized on-premises DNS server for internal hostnames. Some AWS resources need to resolve on-premises hostnames, and some on-premises applications need to resolve AWS-hosted private domains. The company wants to ensure a seamless DNS integration between its on-premises environment and AWS without requiring significant changes to the existing DNS infrastructure. Which of the following steps should the company take to achieve this?
- A
Configure an Amazon Route 53 Resolver inbound endpoint in the AWS VPC and associate it with the on-premises DNS server.
- B
Configure an Amazon Route 53 Resolver outbound endpoint in the AWS VPC and add forwarding rules to direct DNS queries to the on-premises DNS server.
- C
Create a private hosted zone in Route 53 and associate it with the AWS VPC to resolve on-premises hostnames.
- D
Set up conditional forwarding in the on-premises DNS server to forward queries for AWS private domains to the Amazon Route 53 Resolver inbound endpoint.
- E
Deploy Route 53 Resolver rules to forward all DNS queries to the public Route 53 service.
Show answer and explanation
Correct answers: B, D
Explanation
To enable seamless DNS integration in a hybrid environment, the company needs to use Route 53 Resolver endpoints. An outbound endpoint allows AWS resources to forward DNS queries to the on-premises DNS server. Additionally, setting up conditional forwarding in the on-premises DNS server ensures that queries for AWS private domains are forwarded to the Route 53 Resolver inbound endpoint. These steps establish bidirectional DNS resolution between the AWS and on-premises environments while preserving the existing DNS infrastructure.
- A. Incorrect.
This option is incorrect because an inbound endpoint is used for resolving DNS queries from on-premises to AWS, not the other way around.
- B. Correct.
This option is correct because an outbound endpoint allows AWS resources to forward DNS queries to the on-premises DNS server for resolving internal hostnames.
- C. Incorrect.
This option is incorrect because private hosted zones are used for managing DNS records for AWS resources within a VPC and do not help in resolving on-premises hostnames.
- D. Correct.
This option is correct because setting up conditional forwarding in the on-premises DNS server ensures that on-premises applications can resolve AWS private domains by forwarding queries to the Route 53 Resolver inbound endpoint.
- E. Incorrect.
This option is incorrect because forwarding all DNS queries to the public Route 53 service is not needed and does not address the requirement for resolving private/internal domains in a hybrid setup.