Topic 1 Question 15

AWS Certified Solutions Architect - Professional

Topic 1 Question 15
A company is using multiple AWS accounts. The DNS records are stored in a private hosted zone for Amazon Route 53 in Account A. The company’s applications and databases are running in Account B. A solutions architect will deploy a two-tier application in a new VPC. To simplify the configuration, the db.example.com CNAME record set for the Amazon RDS endpoint was created in a private hosted zone for Amazon Route 53. During deployment, the application failed to start. Troubleshooting revealed that db.example.com is not resolvable on the Amazon EC2 instance. The solutions architect confirmed that the record set was created correctly in Route 53. Which combination of steps should the solutions architect take to resolve this issue?

2 つ選択
- Deploy the database on a separate EC2 instance in the new VPC. Create a record set for the instance’s private IP in the private hosted zone.
- Use SSH to connect to the application tier EC2 instance. Add an RDS endpoint IP address to the /etc/resolv.conf file.
- Create an authorization to associate the private hosted zone in Account A with the new VPC in Account B.
- Create a private hosted zone for the example com domain in Account B. Configure Route 53 replication between AWS accounts.
- Associate a new VPC in Account B with a hosted zone in Account A. Delete the association authorization in Account A.
ユーザの投票
コメント(15)
- 正解だと思う選択肢: CE
  C and E are correct.
  
  C. Create an authorization to associate the private hosted zone in Account A with the new VPC in Account B. This step is necessary because the VPC in Account B needs to be associated with the private hosted zone in Account A to be able to resolve the DNS records.
  
  E. Associate a new VPC in Account B with a hosted zone in Account A. Delete the association authorization in Account A. This step is necessary because the association authorization needs to be removed in Account A after the association is done in Account B.
  
  👍 15
  masetromain2023/01/13
- 正解だと思う選択肢: CE
  https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/hosted-zone-private-associate-vpcs-different-accounts.html
  
  👍 4
  Raj402022/12/12
- 正解だと思う選択肢: CE
  C and E. In order to resolve the issue, the solutions architect should create an authorization to associate the private hosted zone in Account A with the new VPC in Account B (Option C). This will allow the new VPC in Account B to access the DNS records stored in the private hosted zone in Account A.
  
  In addition, the solutions architect should associate the new VPC in Account B with the hosted zone in Account A (Option E) and delete the association authorization in Account A. This will ensure that the new VPC in Account B is properly configured to use the private hosted zone in Account A and resolve the db.example.com CNAME record set correctly.
  
  👍 4
  CloudFloater2023/02/11
シャッフルモード

ユーザの投票

コメント(15)