ANS-C01 · Question #50
ANS-C01 Question #50: Real Exam Question with Answer & Explanation
Sign in or unlock ANS-C01 to reveal the answer and full explanation for question #50. The question stem and answer options stay visible for context.
Question
A company is using Amazon Route 53 Resolver DNS Firewall in a VPC to block all domains except domains that are on an approved list. The company is concerned that if DNS Firewall is unresponsive, resources in the VPC might be affected if the network cannot resolve any DNS queries. To maintain application service level agreements, the company needs DNS queries to continue to resolve even if Route 53 Resolver does not receive a response from DNS Firewall. Which change should a network engineer implement to meet these requirements?
Options
- AUpdate the DNS Firewall VPC configuration to disable fail open for the VPC.
- BUpdate the DNS Firewall VPC configuration to enable fail open for the VPC.
- CCreate a new DHCP options set with parameter dns_firewall_fail_open=false. Associate the new
- DCreate a new DHCP options set with parameter dns_firewall_fail_open=true. Associate the new
Unlock ANS-C01 to see the answer
You've previewed enough free ANS-C01 questions. Unlock ANS-C01 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.