CNX-001 · Question #12
A company deployed new applications in the cloud and configured a site-to-site VPN to connect the internal data center with the cloud. The IT team wants the internal servers to connect to those applic
The correct answer is A. Create a DNS server in the cloud. Configure the DNS server in the customer data center to. With a site-to-site VPN already in place, traffic between the data center and cloud travels over private RFC 1918 address space. The missing piece is name resolution: internal servers need to resolve cloud application hostnames to their private cloud IP addresses (not public ones
Question
A company deployed new applications in the cloud and configured a site-to-site VPN to connect the internal data center with the cloud. The IT team wants the internal servers to connect to those applications without using public IP addresses. Which of the following is the best solution?
Options
- ACreate a DNS server in the cloud. Configure the DNS server in the customer data center to
- BConfigure a NAT server on the cloud to allow internal servers to connect to the applications
- CRegister applications on the cloud with a public DNS sever and configure internal servers to
- DConfigure proxy service in the site-to-site VPN to allow internal servers to access applications
How the community answered
(63 responses)- A75% (47)
- B5% (3)
- C8% (5)
- D13% (8)
Explanation
With a site-to-site VPN already in place, traffic between the data center and cloud travels over private RFC 1918 address space. The missing piece is name resolution: internal servers need to resolve cloud application hostnames to their private cloud IP addresses (not public ones). By deploying a private DNS server in the cloud and configuring the on-premises DNS server to conditionally forward cloud domain queries to it, internal servers receive private IP addresses in DNS responses and route traffic through the VPN tunnel. Option B (NAT) doesn't eliminate the need for addressing coordination. Option C (public DNS) explicitly uses public IPs, violating the requirement. Option D (proxy in VPN) is not a standard or practical solution for this scenario.
Topics
Community Discussion
No community discussion yet for this question.