Amazon Exam ANS-C01 Topic 1 Question 19 Discussion

Actual exam question for Amazon's ANS-C01 exam

Question #: 19
Topic #: 1

A company's AWS architecture consists of several VPCs. The VPCs include a shared services VPC and several application VPCs. The company has established network connectivity from all VPCs to the on-premises DNS servers.

Applications that are deployed in the application VPCs must be able to resolve DNS for internally hosted domains on premises. The applications also must be able to resolve local VPC domain names and domains that are hosted in Amazon Route 53 private hosted zones.

What should a network engineer do to meet these requirements?

ACreate a new Route 53 Resolver inbound endpoint in the shared services VPC. Create forwarding rules for the on-premises hosted domains. Associate the rules with the new Resolver endpoint and each application VPC. Update each application VPC's DHCP configuration to point DNS resolution to the new Resolver endpoint.

BCreate a new Route 53 Resolver outbound endpoint in the shared services VPC. Create forwarding rules for the on-premises hosted domains. Associate the rules with the new Resolver endpoint and each application VPC.

CCreate a new Route 53 Resolver outbound endpoint in the shared services VPCreate forwarding rules for the on-premises hosted domains. Associate the rules with the new Resolver endpoint and each application VPUpdate each application VPC's DHCP configuration to point DNS resolution to the new Resolver endpoint.

DCreate a new Route 53 Resolver inbound endpoint in the shared services VPC. Create forwarding rules for the on-premises hosted domains. Associate the rules with the new Resolver endpoint and each application VPC.

Show Suggested Answer

Suggested Answer: B

Creating a new Route 53 Resolver outbound endpoint in the shared services VPC would enable forwarding of DNS queries from the VPC to on-premises1.Creating forwarding rules for the on-premises hosted domains would enable specifying which domain names are forwarded to the on-premises DNS servers2.Associating the rules with the new Resolver endpoint and each application VPC would enable applying the rules to the VPCs2.This solution would not affect the default DNS resolution behavior of Route 53 Resolver for local VPC domain names and domains that are hosted in Route 53 private hosted zones3.

by Nieves at Jan 26, 2024, 05:11 PM

Limited Time Offer

25%

Off

Get Premium ANS-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Micaela

9 days ago

I think we can all agree that option A is the way to go. It covers all the bases and meets the requirements. Now, let's just hope the exam question is as straightforward as this one!

upvoted 0 times

...

Walton

10 days ago

Exactly, that's a crucial step to make sure the applications are actually using the Resolver endpoint for DNS resolution. Option D is just the inbound endpoint without the forwarding rules, so that's not complete either.

upvoted 0 times

...

Jesse

11 days ago

Yeah, that doesn't seem like the right approach here. Option C is similar to A, but it's missing the step of updating the DHCP configuration in the application VPCs to point to the new Resolver endpoint.

upvoted 0 times

...

Allene

12 days ago

Haha, good one! Alright, let's move on to the other options. Option B mentions creating a Resolver outbound endpoint, but that's generally used for outgoing DNS queries, not for resolving on-premises domains.

upvoted 0 times

...