Topic 1 Question 490
A company requires that all internal application connectivity use private IP addresses. To facilitate this policy, a solutions architect has created interface endpoints to connect to AWS Public services. Upon testing, the solutions architect notices that the service names are resolving to public IP addresses, and that internal services cannot connect to the interface endpoints.
Which step should the solutions architect take to resolve this issue?
Update the subnet route table with a route to the interface endpoint.
Enable the private DNS option on the VPC attributes.
Configure the security group on the interface endpoint to allow connectivity to the AWS services.
Configure an Amazon Route 53 private hosted zone with a conditional forwarder for the internal application.
ユーザの投票
コメント(8)
- 正解だと思う選択肢: B
ensures proper DNS resolution for VPC endpoints.
👍 6ebbff632024/06/26 - 正解だと思う選択肢: B
The correct step the solutions architect should take to resolve the issue of service names resolving to public IP addresses and internal services not being able to connect to the interface endpoints is Option B: Enable the private DNS option on the VPC attributes.
When you create an interface endpoint, AWS automatically creates a private DNS name for the service that resolves to the private IP addresses of the interface endpoint. However, by default, the private DNS option is disabled on the VPC, which means that DNS queries for the service name will be resolved using the public DNS instead of the private DNS provided by the interface endpoint.
By enabling the private DNS option on the VPC attributes, you instruct the VPC to use the private DNS names provided by the interface endpoints for the specified AWS services. This ensures that the service names resolve to the private IP addresses of the interface endpoints, allowing internal services within the VPC to connect to the AWS services using private IP addresses, as per the company's policy.
👍 30b432912024/11/16 - 正解だと思う選択肢: B
Private DNS for Interface Endpoints. Answer B.
👍 1mifune2024/06/27
シャッフルモード