ANS-C01 Question #117: Real Exam Question with Answer & Explanation

Question

A company has an AWS Site-to-Site VPN connection between its existing VPC and on-premises network. The default DHCP options set is associated with the VPC. The company has an application that is running on an Amazon Linux 2 Amazon EC2 instance in the VPC. The application must retrieve an Amazon RDS database secret that is stored in AWS Secrets Manager through a private VPC endpoint. An on-premises application provides internal RESTful API service that can be reached by URL (https://api.example.internal). Two on-premises Windows DNS servers provide internal DNS resolution. The application on the EC2 instance needs to call the internal API service that is deployed in the on-premises environment. When the application on the EC2 instance attempts to call the internal API service by referring to the hostname that is assigned to the service, the call fails. When a network engineer tests the API service call from the same EC2 instance by using the API service's IP address, the call is successful. What should the network engineer do to resolve this issue and prevent the same problem from affecting other resources in the VPC?

Options

• ACreate a new DHCP options set that specifies the on-premises Windows DNS servers. Associate
• BCreate an Amazon Route 53 Resolver rule. Associate the rule with the VPC. Configure the rule to
• CModify the local host file in the Amazon Linux 2 EC2 instance in the VPMap the service domain
• DModify the local /etc/resolv.conf file in the Amazon Linux 2 EC2 instance in the VPC. Change the