ANS-C01 · Question #29
A company delivers applications over the internet. An Amazon Route 53 public hosted zone is the authoritative DNS service for the company and its internet applications, all of which are offered from…
The correct answer is B. Create a Route 53 private hosted zone for the same domain name Associate the application's C. Enable DNS hostnames for the application's VPC. D. Create entries in the private hosted zone for each name in the public hosted zone by using the. To resolve internal application components using public hostnames within the VPC, a private hosted zone must be created, associated with the VPC, and populated with internal DNS records, while also ensuring DNS hostnames are enabled for the VPC.
Question
A company delivers applications over the internet. An Amazon Route 53 public hosted zone is the authoritative DNS service for the company and its internet applications, all of which are offered from the same domain name. A network engineer is working on a new version of one of the applications. All the application's components are hosted in the AWS Cloud. The application has a three-tier design. The front end is delivered through Amazon EC2 instances that are deployed in public subnets with Elastic IP addresses assigned. The backend components are deployed in private subnets from RFC1918. Components of the application need to be able to access other components of the application within the application's VPC by using the same host names as the host names that are used over the public internet. The network engineer also needs to accommodate future DNS changes, such as the introduction of new host names or the retirement of DNS entries. Which combination of steps will meet these requirements? (Choose three.)
Options
- AAdd a geoproximity routing policy in Route 53.
- BCreate a Route 53 private hosted zone for the same domain name Associate the application's
- CEnable DNS hostnames for the application's VPC.
- DCreate entries in the private hosted zone for each name in the public hosted zone by using the
- ECreate an Amazon EventBridge (Amazon CloudWatch Events) rule that runs when AWS
- FAdd the private IP addresses in the existing Route 53 public hosted zone.
How the community answered
(34 responses)- A6% (2)
- B47% (16)
- E35% (12)
- F12% (4)
Why each option
To resolve internal application components using public hostnames within the VPC, a private hosted zone must be created, associated with the VPC, and populated with internal DNS records, while also ensuring DNS hostnames are enabled for the VPC.
Geoproximity routing is used for routing traffic to resources based on their geographic location and is irrelevant for internal VPC DNS resolution.
Creating a private hosted zone for the same domain name and associating it with the VPC allows internal DNS queries to be resolved within the VPC using private IP addresses, overriding public DNS resolution for that domain.
Enabling DNS hostnames for the VPC ensures that EC2 instances launched within the VPC are assigned hostnames that can be resolved by the VPC's DNS resolver, which is necessary for the private hosted zone to function correctly for internal resources.
Creating records in the private hosted zone that map the public hostnames to the private IP addresses of the application components ensures that internal traffic resolves to the internal resources, while external traffic resolves to public resources.
Amazon EventBridge is an event bus service for building event-driven architectures and has no direct role in DNS resolution or VPC configuration.
Adding private IP addresses to a public hosted zone would expose internal network information publicly and would not facilitate internal resolution without a private hosted zone.
Concept tested: Route 53 Private Hosted Zones for Split-Horizon DNS
Source: https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/hosted-zones-private.html
Topics
Community Discussion
No community discussion yet for this question.