SOA-C02 Question 259
Select 2Your company has deployed an internal application running on EC2 instances in a VPC. To ensure secure communication between on-premises systems and the application, DNS queries from the on-premises network must resolve to private IP addresses of the EC2 instances. Which configuration steps are required in Amazon Route 53 Resolver to meet this requirement?
- A
Create an inbound Resolver endpoint and associate it with the VPC.
- B
Create an outbound Resolver endpoint and associate it with the VPC.
- C
Configure a Route 53 Resolver rule to forward DNS queries for the application's domain to the on-premises DNS server.
- D
Update the on-premises DNS server to forward requests for the application's domain to the inbound Resolver endpoint's IP address.
- E
Enable DNS resolution in the VPC settings to allow Route 53 Resolver queries.
Show answer and explanation
Correct answers: A, D
Explanation
To allow on-premises systems to resolve private IP addresses of resources in a VPC, you need to create an inbound Resolver endpoint in Route 53 Resolver and configure the on-premises DNS server to forward queries to this endpoint. The inbound Resolver endpoint acts as a bridge for DNS queries from the on-premises network into the AWS environment.
- A. Correct.
Correct. An inbound Resolver endpoint allows DNS queries from on-premises systems to resolve private DNS records in a VPC.
- B. Incorrect.
Incorrect. An outbound Resolver endpoint is used to forward DNS queries to external or on-premises DNS servers, which is not required in this scenario.
- C. Incorrect.
Incorrect. This configuration is used to forward DNS queries to on-premises DNS servers, but in this case, the on-premises systems need to resolve private IPs in the VPC.
- D. Correct.
Correct. The on-premises DNS server must forward requests for the application's domain to the Resolver endpoint's IP address to enable resolution of private DNS records.
- E. Incorrect.
Incorrect. While enabling DNS resolution in the VPC is necessary for internal DNS queries, it is not directly related to configuring Route 53 Resolver for on-premises systems.