Topic 1 Question 289
A company has a hybrid environment. The company has set up an AWS Direct Connect connection between the company's on-premises data center and a workload that runs in a VPC. The company uses Amazon Route 53 for DNS on AWS. The company uses a private hosted zone to manage DNS names for a set of services that are hosted on AWS.
The company wants the on-premises servers to use Route 53 for DNS resolution of the private hosted zone.
Which solution will meet these requirements?
Create a Route 53 inbound endpoint. Ensure that security groups and routing allow the traffic from the on-premises data center. Configure the DNS server on the on-premises network to conditionally forward DNS queries for the private hosted zone's domain name to the IP addresses of the inbound endpoint.
Create a Route 53 outbound endpoint. Ensure that security groups and routing allow the traffic from the VPC. Configure the DNS server on the on-premises network to conditionally forward DNS queries for the private hosted zone’s domain name to the IP addresses of the outbound endpoint.
Edit the private hosted zone in Route 53 with a TXT record that references the on-premises DNS servers. Configure the DNS server on the on-premises network to conditionally forward DNS queries for the private hosted zone’s domain name to the base of the VPC CIDR IPv4 network range, plus two.
Edit the private hosted zone in Route 53 with a PTR record that references the on-premises DNS servers. Configure the DNS server on the on-premises network to conditionally forward DNS queries for the private hosted zone’s domain name to the base of the VPC CIDR IPv4 network range, plus two.
ユーザの投票
コメント(2)
- 正解だと思う選択肢: A
Inbound Resolver endpoints allow DNS queries to your VPC from your on-premises network or another VPC.
https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resolver.html
👍 2kondratyevmn2023/05/12 - 正解だと思う選択肢: B
Explanation: By creating a Route 53 outbound endpoint, the on-premises servers can forward DNS queries for the private hosted zone's domain name to Route 53. This allows the on-premises servers to resolve DNS queries for the private hosted zone using Route 53's DNS resolution. The outbound endpoint provides a secure and efficient way for on-premises DNS resolution.
A is incorrect because the inbound endpoint is used for receiving DNS queries from your on-premises network to resolve public DNS names. It is not suitable for resolving private hosted zone names.
C and D are incorrect because editing the private hosted zone with TXT or PTR records does not enable the on-premises servers to use Route 53 for DNS resolution. The solution lies in using outbound endpoints for DNS resolution from on-premises servers.
👍 1thetnyeinmoe2023/05/26
シャッフルモード