nerdexam
AmazonAmazon

SAA-C03 · Question #422

SAA-C03 Question #422: Real Exam Question with Answer & Explanation

The correct answer is C: Create DNS endpoints by using Amazon Route 53 Resolver. Add conditional forwarding rules to. Amazon Route 53 Resolver endpoints allow you to integrate DNS between AWS and on- premises environments easily. By creating inbound and outbound resolver endpoints, you can configure conditional forwarding rules so that DNS queries for your on-premises AD domain are forwarded to

Submitted by chen.hong· Mar 4, 2026Design High-Performing Architectures

Question

A company is migrating mobile banking applications to run on Amazon EC2 instances in a VPC. Backend service applications run in an on-premises data center. The data center has an AWS Direct Connect connection into AWS. The applications that run in the VPC need to resolve DNS requests to an on-premises Active Directory domain that runs in the data center. Which solution will meet these requirements with the LEAST administrative overhead?

Options

  • AProvision a set of EC2 instances across two Availability Zones in the VPC as caching DNS
  • BProvision an Amazon Route 53 private hosted zone. Configure NS records that point to on-
  • CCreate DNS endpoints by using Amazon Route 53 Resolver. Add conditional forwarding rules to
  • DProvision a new Active Directory domain controller in the VPC with a bidirectional trust between

Explanation

Amazon Route 53 Resolver endpoints allow you to integrate DNS between AWS and on- premises environments easily. By creating inbound and outbound resolver endpoints, you can configure conditional forwarding rules so that DNS queries for your on-premises AD domain are forwarded to the on-premises DNS servers. This approach is fully managed, scales automatically, and requires the least administrative overhead.

Community Discussion

No community discussion yet for this question.

Full SAA-C03 PracticeBrowse All SAA-C03 Questions