Topic 1 Question 712

AWS Certified Solutions Architect - Associate

Topic 1 Question 712
A company is designing a web application on AWS. The application will use a VPN connection between the company’s existing data centers and the company's VPCs.

The company uses Amazon Route 53 as its DNS service. The application must use private DNS records to communicate with the on-premises services from a VPC.

Which solution will meet these requirements in the MOST secure manner?
- Create a Route 53 Resolver outbound endpoint. Create a resolver rule. Associate the resolver rule with the VPC.
- Create a Route 53 Resolver inbound endpoint. Create a resolver rule. Associate the resolver rule with the VPC.
- Create a Route 53 private hosted zone. Associate the private hosted zone with the VPC.
- Create a Route 53 public hosted zone. Create a record for each service to allow service communication
ユーザの投票
コメント(10)
- 正解だと思う選択肢: A
  If you have workloads that leverage both VPCs and on-premises resources, you also need to resolve DNS records hosted on-premises. Similarly, these on-premises resources may need to resolve names hosted on AWS. Through Resolver endpoints and conditional forwarding rules, you can resolve DNS queries between your on-premises resources and VPCs to create a hybrid cloud setup over VPN or Direct Connect (DX). Specifically:
  
  Inbound Resolver endpoints allow DNS queries to your VPC from your on-premises network or another VPC.
  
  Outbound Resolver endpoints allow DNS queries from your VPC to your on-premises network or another VPC.
  
  Reference: https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resolver.html
  
  👍 16
  haci2024/02/16
- 正解だと思う選択肢: A
  Amazon Route 53 Resolver provides DNS resolution for VPCs and on-premises networks over a Direct Connect or VPN connection. An outbound resolver endpoint forwards DNS queries from your VPC to your on-premises DNS service. A resolver rule specifies the domain names for the DNS queries that you want to forward (such as example.com), and the IP addresses of the DNS resolvers in your on-premises network. Option C is not suitable because private hosted zones are used to route traffic within a VPC https://aws.amazon.com/blogs/architecture/using-route-53-private-hosted-zones-for-cross-account-multi-region-architectures/
  
  👍 6
  JCVDB232024/03/15
- 正解だと思う選択肢: A
  Should be A "Create a Route 53 Resolver outbound endpoint."
  
  👍 5
  anikolov2024/02/07
シャッフルモード

ユーザの投票

コメント(10)