Exam AWS Certified Solutions Architect - Professional topic 1 question 793 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Professional

Question #: 793
Topic #: 1

[All AWS Certified Solutions Architect - Professional Questions]

A company plans to deploy a new private intranet service on Amazon EC2 instances inside a VPC. An AWS Site-to-Site VPN connects the VPC to the company's on-premises network. The new service must communicate with existing on-premises services. The on-premises services are accessible through the use of hostnames that reside in the company.example DNS zone. This DNS zone is wholly hosted on premises and is available only on the company's private network.
A solutions architect must ensure that the new service can resolve hostnames on the company example domain to integrate with existing services.
Which solution meets these requirements?

A. Create an empty private zone in Amazon Route 53 for company example. Add an additional NS record to the company's on-premises company.example zone that points to the authoritative name servers for the new private zone in Route 53.
B. Turn on DNS hostnames for the VPC. Configure a new outbound endpoint with Amazon Route 53 Resolver. Create a Resolver rule to forward requests for company.example to the on-premises name servers.
C. Turn on DNS hostnames for the VPC. Configure a new inbound resolver endpoint with Amazon Route 53 Resolver. Configure the on-premises DNS server to forward requests for company.example to the new resolver.
D. Use AWS Systems Manager to configure a run document that will install a hosts file that contains any required hostnames. Use an Amazon EventBridge (Amazon CloudWatch Events) rule to run the document when an instance is entering the running state.

Show Suggested Answer

Suggested Answer: B 🗳️

by kubala at Dec. 29, 2021, 7:32 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

andras

1 year, 9 months ago

Selected Answer: C

Inbound resolvers allow you to resolve your private Route 53 zones from off-premise. Outbound resolvers allow you to forward requests to your name servers of choice for things like AD resolution. These are common sense things that a managed DNS service that you have no choice but to use would offer.

upvoted 1 times

andras

1 year, 9 months ago

sorry... it's outbound: the new service can resolve hostnames on the company example domain to integrate with existing services.

upvoted 1 times

...

Blair77

2 years, 1 month ago

Selected Answer: B

No doubt! It's BBB

upvoted 2 times

...

gnic

2 years, 3 months ago

Selected Answer: B

it's B, outbound resolver https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resolver.html

upvoted 2 times

...

asfsdfsdf

2 years, 4 months ago

Selected Answer: B

B - need to resolve DNS entries from the VPC to the on-prem, already have VPN connection so forward DNS resolving query usingg outbound endpoint and rule to the DNS server of the company

upvoted 3 times

...

LiamNg

2 years, 6 months ago

Answer: B Ref https://docs.amazonaws.cn/en_us/Route53/latest/DeveloperGuide/resolver-forwarding-outbound-queries.html To forward DNS queries that originate on Amazon EC2 instances in one or more VPCs to your network, you create an outbound endpoint and Route 53 Resolver rules

upvoted 4 times

...