Amazon SAP-C02 Exam - Topic 1 Question 17 Discussion

Actual exam question for Amazon's SAP-C02 exam

Question #: 17
Topic #: 1

A company plans to deploy a new private intranet service on Amazon EC2 instances inside a VPC. An AWS Site-to-Site VPN connects the VPC to the company's on-premises network. The new service must communicate with existing on-premises services The on-premises services are accessible through the use of hostnames that reside in the company example DNS zone This DNS zone is wholly hosted on premises and is available only on the company's private network.

A solutions architect must ensure that the new service can resolve hostnames on the company example domain to integrate with existing services.

Which solution meets these requirements?

ACreate an empty private zone in Amazon Route 53 for company example Add an additional NS record to the company's on-premises company example zone that points to the authoritative name servers for the new private zone in Route 53

BTurn on DNS hostnames for the VPC Configure a new outbound endpoint with Amazon Route 53 Resolver. Create a Resolver rule to forward requests for company example to the on-premises name servers

CTurn on DNS hostnames for the VPC Configure a new inbound resolver endpoint with Amazon Route 53 Resolver. Configure the on-premises DNS server to forward requests for company example to the new resolver.

DUse AWS Systems Manager to configure a run document that will install a hosts file that contains any required hostnames. Use an Amazon EventBndge rule to run the document when an instance is entering the running state.

Show Suggested Answer

Suggested Answer: B

https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resolver.html

by Christiane at Aug 31, 2023, 03:00 AM

Limited Time Offer

25%

Off

Get Premium SAP-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Darell

3 months ago

Option A is too complicated for what we need.

upvoted 0 times

...

Martha

3 months ago

Definitely need to turn on DNS hostnames for the VPC.

upvoted 0 times

...

Jimmie

4 months ago

Surprised that option D is even a suggestion!

upvoted 0 times

...

Candida

4 months ago

I disagree, I think option C could work too.

upvoted 0 times

...

Josphine

4 months ago

Option B seems like the best choice for DNS resolution.

upvoted 0 times

...

Nieves

4 months ago

I recall that using Systems Manager for DNS resolution isn't typical. Option D seems like a workaround rather than a proper solution for DNS integration.

upvoted 0 times

...

Louis

4 months ago

I'm a bit confused about option A. Creating an empty private zone in Route 53 seems like it might not actually help with resolving the existing hostnames.

upvoted 0 times

...

Rueben

5 months ago

I practiced a similar question where we had to connect VPC and on-premises DNS. I feel like option C might be the right answer since it mentions inbound resolver endpoints.

upvoted 0 times

...

Billi

5 months ago

I think option B sounds familiar. I remember something about using Route 53 Resolver to forward DNS queries, but I'm not entirely sure if it's the best choice here.

upvoted 0 times

...

Krystal

5 months ago

Hmm, this looks like a straightforward security-related question. I'll start by thinking about the key security services Alibaba Cloud offers and see which ones match the description.

upvoted 0 times

...

Lettie

5 months ago

I'm a bit confused on the difference between the filter types here. I'll need to review the details to make sure I select the right one.

upvoted 0 times

...

Val

5 months ago

I'm a bit unsure. They said 'random', but they're not actually choosing records randomly. Is this a trick?

upvoted 0 times

...

Floyd

5 months ago

Hmm, this seems like a tricky one. I'll need to think carefully about the different options and how they relate to accessing resources in another forest.

upvoted 0 times

...

Jacki

5 months ago

Okay, let's see. I know an estate for a term of years is a specific duration of property interest. I'll focus on the differences between the statements to find the one that's incorrect.

upvoted 0 times

...