Discuss Amazon ANS-C01 Exam Topic 4 Question 22

A development team is building a new web application in the AWS Cloud. The main company domain, example.com. is currently hosted in an Amazon Route 53 public hosted zone in one of the company's production AWS accounts.

The developers want to test the web application in the company's staging AWS account by using publicly resolvable subdomains under the example.com domain with the ability to create and delete DNS records as needed. Developers have full access to Route 53 hosted zones within the staging account, but they are prohibited from accessing resources in any of the production AWS accounts.

Which combination of steps should a network engineer take to allow the developers to create records under the example.com domain? (Select TWO.)

ACreate a public hosted zone for example.com in the staging account.

BCreate a staging.example.com NS record in the example.com domain. Populate the value with the name servers from the staging.example.com domain. Set the routing policy type to simple routing.

CCreate a private hosted zone for stagmg.example.com in the staging account.

DCreate an example.com NS record in the staging.example.com domain. Populate the value with the name servers from the example.com domain. Set the routing policy type to simple routing

ECreate a public hosted zone for staging.example.com in the staging account.

Suggested Answer: C

The correct solution is to use an S3 interface endpoint and an on-premises DNS resolver. An S3 interface endpoint allows you to access Amazon S3 using private IP addresses within your VPC. An on-premises DNS resolver can be configured to forward the DNS queries for the S3 domain names to the S3 interface endpoint, so that the on-premises workloads can access Amazon S3 privately over the VPN connection. This solution is operationally efficient, as it does not require any additional infrastructure or changes to the existing workloads. The VPC workloads can continue to use the S3 gateway endpoint, which provides lower latency and higher throughput than the S3 interface endpoint.

Get Premium ANS-C01 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

28 comments · newest first

Apolonia 11 months ago

I think a private hosted zone might be better for security.

Glennis 11 months ago

B is definitely a solid choice too!

Felix 11 months ago

Wait, can they really manage DNS records without access to production?

Jettie 11 months ago

Totally agree, that’s the way to go!

Michal 12 months ago

Just create a public hosted zone for staging.example.com, right?

Pansy 12 months ago

I feel like option E makes sense since it allows the staging account to manage its own subdomain, but I'm not completely confident about the NS records part.

Shoshana 1 year ago

I practiced a similar question where we had to set up DNS records, but I can't recall if we should create a public hosted zone or just use the existing one.

Abel 1 year ago

I think we might need to create an NS record for staging.example.com in the main example.com domain to delegate the DNS management.

Theola 1 year ago

I remember something about creating subdomains, but I'm not sure if we need a public or private hosted zone for staging.example.com.

Darci 1 year ago

Based on the requirements, I think the best approach is to go with options A and E. Creating a public hosted zone for staging.example.com in the staging account, and then letting the developers manage DNS records there, seems like the cleanest solution.

Claribel 1 year ago

I'm a bit confused about the requirement to use the example.com domain in the staging account. Wouldn't it be simpler to just create a new domain for the staging environment? Options C and D don't seem to address the core issue.

Arlette 1 year ago

I think the key here is to create a subdomain in the staging account that can be used for testing, without modifying the production domain. Options A and E seem like the best approach to achieve that.

Refugia 1 year ago

Hmm, this is a tricky one. I'm leaning towards options A and B - creating a public hosted zone for the subdomain in the staging account, and then setting up an NS record to point to it from the production domain. That way, the developers can manage the subdomain independently.

Patrick 1 year ago

Hmm, this looks like a tricky one. I'll need to carefully review the debug output and compare the configuration settings on both routers.

Shanda 1 year ago

I think the key here is to make sure the operands are the same data type. If the Balance field is a string, I'll need to convert it to a number before comparing it.

Loise 1 year ago

Wait, what's the default runlevel again? I'm drawing a blank on that detail. I better review my study materials quickly before answering.

Maryann 1 year ago

Okay, let's think this through step-by-step. I think B and E are the right combination, but I'm curious to see what the other candidates come up with.

Rhea 1 year ago

Haha, I'm just imagining the developers trying to remember which DNS records they created and where. Maybe they should just use a separate domain for the staging environment.

Fausto 1 year ago

Hmm, I think the key here is to create a subdomain in the staging account and link it back to the production domain. Option B seems like the way to go.

Elinore 1 year ago

↳ replying to Fausto

Let's go with Option B and create the staging.example.com NS record in the example.com domain.

Ena 1 year ago

↳ replying to Fausto

Creating a public hosted zone for example.com in the staging account and setting up the NS record for staging.example.com makes sense.

Tonette 1 year ago

↳ replying to Fausto

I agree, Option B seems like the best choice to link the subdomain back to the production domain.

Desire 2 years ago

Wait, so we can't access the production account, but we need to create records in the production domain? This sounds like a recipe for disaster.

Ardella 1 year ago

↳ replying to Desire

B) Create a staging.example.com NS record in the example.com domain. Populate the value with the name servers from the staging.example.com domain. Set the routing policy type to simple routing.

Brunilda 1 year ago

↳ replying to Desire

A) Create a public hosted zone for example.com in the staging account.

Malcom 2 years ago

I'm not sure about that. Maybe we should create a private hosted zone for staging.example.com instead.

Deandrea 2 years ago

I agree with Stefan. We also need to create a staging.example.com NS record in the example.com domain.

Stefan 2 years ago

I think we should create a public hosted zone for example.com in the staging account.

Amazon ANS-C01 Exam - Topic 4 Question 22 Discussion