Topic 1 Question 11
2 つ選択A company is using custom DNS servers that run BIND for name resolution in its VPCs. The VPCs are deployed across multiple AWS accounts that are part of the same organization in AWS Organizations. All the VPCs are connected to a transit gateway. The BIND servers are running in a central VPC and are configured to forward all queries for an on-premises DNS domain to DNS servers that are hosted in an on-premises data center. To ensure that all the VPCs use the custom DNS servers, a network engineer has configured a VPC DHCP options set in all the VPCs that specifies the custom DNS servers to be used as domain name servers. Multiple development teams in the company want to use Amazon Elastic File System (Amazon EFS). A development team has created a new EFS file system but cannot mount the file system to one of its Amazon EC2 instances. The network engineer discovers that the EC2 instance cannot resolve the IP address for the EFS mount point fs-33444567d.efs.us-east-1.amazonaws.com. The network engineer needs to implement a solution so that development teams throughout the organization can mount EFS file systems. Which combination of steps will meet these requirements?
Configure the BIND DNS servers in the central VPC to forward queries for efs.us-east-1.amazonaws.com to the Amazon provided DNS server (169.254.169.253).
Create an Amazon Route 53 Resolver outbound endpoint in the central VPC. Update all the VPC DHCP options sets to use AmazonProvidedDNS for name resolution.
Create an Amazon Route 53 Resolver inbound endpoint in the central VPUpdate all the VPC DHCP options sets to use the Route 53 Resolver inbound endpoint in the central VPC for name resolution.
Create an Amazon Route 53 Resolver rule to forward queries for the on-premises domain to the on-premises DNS servers. Share the rule with the organization by using AWS Resource Access Manager (AWS RAM). Associate the rule with all the VPCs.
Create an Amazon Route 53 private hosted zone for the efs.us-east-1.amazonaws.com domain. Associate the private hosted zone with the VPC where the EC2 instance is deployed. Create an A record for fs-33444567d.efs.us-east-1.amazonaws.com in the private hosted zone. Configure the A record to return the mount target of the EFS mount point.
ユーザの投票
コメント(17)
Please refer the below extract taken from the link - https://aws.amazon.com/blogs/security/simplify-dns-management-in-a-multiaccount-environment-with-route-53-resolver/
"You can mount an Amazon EFS file system on an Amazon EC2 instance using DNS names. The file system DNS name automatically resolves to the mount target’s IP address in the Availability Zone of the connecting Amazon EC2 instance. To be able to do that, the VPC must use the default DNS provided by Amazon to resolve EFS DNS names.
If you plan to use EFS in your environment, I recommend that you resolve EFS DNS names locally and avoid sending these queries to central DNS because clients in that case would not receive answers optimized for their availability zone, which might result in higher operation latencies and less durability."
So, option B) answers EFS resolution from VPC. Combination of Option B) and D) explains resolution from on-prem
👍 7study_aws12023/03/27A, E - correct.
Explanation:
The issue is that the EC2 instance cannot resolve the IP address for the EFS mount point, which is a host name in the efs.us-east-1.amazonaws.com domain. The company is using custom DNS servers that are forwarding queries for an on-premises domain to on-premises DNS servers. To resolve this issue, the network engineer needs to configure the BIND DNS servers to forward queries for the efs.us-east-1.amazonaws.com domain to the Amazon provided DNS server (169.254.169.253). This will allow the custom DNS servers to resolve the IP address for the EFS mount point.
However, this alone is not sufficient for the EC2 instance to be able to mount the EFS file system. The network engineer also needs to create an Amazon Route 53 private hosted zone for the efs.us-east-1.amazonaws.com domain and create an A record for the EFS mount point. The A record should return the mount target of the EFS mount point. This will allow the EC2 instance to resolve the hostname for the EFS mount point using Amazon Route 53.
👍 5zaazanuna2023/03/18BD - correct.
👍 4flowers002023/03/18
シャッフルモード