Topic 1 Question 71
A company is using Amazon Route 53 Resolver DNS Firewall in a VPC to block all domains except domains that are on an approved list. The company is concerned that if DNS Firewall is unresponsive, resources in the VPC might be affected if the network cannot resolve any DNS queries. To maintain application service level agreements, the company needs DNS queries to continue to resolve even if Route 53 Resolver does not receive a response from DNS Firewall. Which change should a network engineer implement to meet these requirements?
Update the DNS Firewall VPC configuration to disable fail open for the VPC.
Update the DNS Firewall VPC configuration to enable fail open for the VPC.
Create a new DHCP options set with parameter dns_firewall_fail_open=false. Associate the new DHCP options set with the VPC.
Create a new DHCP options set with parameter dns_firewall_fail_open=true. Associate the new DHCP options set with the VPC.
ユーザの投票
コメント(6)
- 正解だと思う選択肢: B
Explanation: Enabling the "fail open" feature in the Route 53 Resolver DNS Firewall VPC configuration ensures that if DNS Firewall becomes unresponsive, DNS queries will still be resolved. This helps maintain application service level agreements by allowing resources in the VPC to continue operating even if Route 53 Resolver does not receive a response from DNS Firewall.
👍 3gpt_test2023/04/03 B - coorect
👍 2study_aws12023/03/24- 正解だと思う選択肢: B
B, as in BUENO Good luck everyone! Has anyone made it this far taken the test with these questions??
👍 2ITgeek2023/04/07
シャッフルモード