ANS-C01 Question #11: Real Exam Question with Answer & Explanation

Question

A company is using custom DNS servers that run BIND for name resolution in its VPCs. The VPCs are deployed across multiple AWS accounts that are part of the same organization in AWS Organizations. All the VPCs are connected to a transit gateway. The BIND servers are running in a central VPC and are configured to forward all queries for an on-premises DNS domain to DNS servers that are hosted in an on-premises data center. To ensure that all the VPCs use the custom DNS servers, a network engineer has configured a VPC DHCP options set in all the VPCs that specifies the custom DNS servers to be used as domain name servers. Multiple development teams in the company want to use Amazon Elastic File System (Amazon EFS). A development team has created a new EFS file system but cannot mount the file system to one of its Amazon EC2 instances. The network engineer discovers that the EC2 instance cannot resolve the IP address for the EFS mount point fs-33444567d.efs.us-east- 1.amazonaws.com. The network engineer needs to implement a solution so that development teams throughout the organization can mount EFS file systems. Which combination of steps will meet these requirements? (Choose two.)

Options

• AConfigure the BIND DNS servers in the central VPC to forward queries for efs.us-east-
• BCreate an Amazon Route 53 Resolver outbound endpoint in the central VPC. Update all the VPC
• CCreate an Amazon Route 53 Resolver inbound endpoint in the central VPUpdate all the VPC
• DCreate an Amazon Route 53 Resolver rule to forward queries for the on-premises domain to the
• ECreate an Amazon Route 53 private hosted zone for the efs.us-east-1.amazonaws.com domain.