nerdexam
Amazon

ANS-C01 · Question #149

A network engineer is working on a private DNS design to integrate AWS workloads and on- premises resources. The AWS deployment consists of five VPCs in the eu-west-1 Region that connect to the…

The correct answer is D. Add a forwarding rule for "*" that targets the Route 53 Resolver outbound endpoint. If the domain name in a query doesn't match the domain name in any other rules, Resolver forwards the query based on the settings in the autodefined "." (dot) rule. The dot rule applies to all domain names except some AWS internal domain names and record names in private hosted…

Submitted by joshua94· Mar 6, 2026DOMAIN_OBJECTIVES_LIST_MISSING

Question

A network engineer is working on a private DNS design to integrate AWS workloads and on- premises resources. The AWS deployment consists of five VPCs in the eu-west-1 Region that connect to the on-premises network over AWS Direct Connect. The VPCs communicate with each other by using a transit gateway. Each VPC is associated with a private hosted zone that uses the aws.example.internal domain. The network engineer creates an Amazon Route 53 Resolver outbound endpoint in a shared services VPC and attaches the shared services VPC to the transit gateway. The network engineer is implementing a solution for DNS resolution. Queries for hostnames that end with aws.example.internal must use the private hosted zone. Queries for hostnames that end with all other domains must be forwarded to a private on-premises DNS resolver. Which solution will meet these requirements?

Options

  • AAdd a forwarding rule for "*" that targets the on-premises server's DNS IP address. Add a system
  • BAdd a forwarding rule for aws.example.internal that targets Route 53 Resolver. Add a system rule
  • CAdd a forwarding rule for "*" that targets the Route 53 Resolver outbound endpoint.
  • DAdd a forwarding rule for "*" that targets the Route 53 Resolver outbound endpoint.

How the community answered

(56 responses)
  • A
    4% (2)
  • B
    21% (12)
  • C
    9% (5)
  • D
    66% (37)

Explanation

If the domain name in a query doesn't match the domain name in any other rules, Resolver forwards the query based on the settings in the autodefined "." (dot) rule. The dot rule applies to all domain names except some AWS internal domain names and record names in private hosted https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resolver-overview-DSN-queries-to- vpc.html#resolver-overview-forward-vpc-to-network-domain-name-matches

Topics

#Route 53 Resolver#Hybrid DNS#Outbound Endpoints#Private Hosted Zones

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full ANS-C01 Practice