SAA-C03 · Question #422
A company is migrating mobile banking applications to run on Amazon EC2 instances in a VPC. Backend service applications run in an on-premises data center. The data center has an AWS Direct Connect co
The correct answer is C. Create DNS endpoints by using Amazon Route 53 Resolver. Add conditional forwarding rules to. Amazon Route 53 Resolver endpoints allow you to integrate DNS between AWS and on- premises environments easily. By creating inbound and outbound resolver endpoints, you can configure conditional forwarding rules so that DNS queries for your on-premises AD domain are forwarded to
Question
A company is migrating mobile banking applications to run on Amazon EC2 instances in a VPC. Backend service applications run in an on-premises data center. The data center has an AWS Direct Connect connection into AWS. The applications that run in the VPC need to resolve DNS requests to an on-premises Active Directory domain that runs in the data center. Which solution will meet these requirements with the LEAST administrative overhead?
Options
- AProvision a set of EC2 instances across two Availability Zones in the VPC as caching DNS
- BProvision an Amazon Route 53 private hosted zone. Configure NS records that point to on-
- CCreate DNS endpoints by using Amazon Route 53 Resolver. Add conditional forwarding rules to
- DProvision a new Active Directory domain controller in the VPC with a bidirectional trust between
How the community answered
(48 responses)- A15% (7)
- B4% (2)
- C77% (37)
- D4% (2)
Explanation
Amazon Route 53 Resolver endpoints allow you to integrate DNS between AWS and on- premises environments easily. By creating inbound and outbound resolver endpoints, you can configure conditional forwarding rules so that DNS queries for your on-premises AD domain are forwarded to the on-premises DNS servers. This approach is fully managed, scales automatically, and requires the least administrative overhead.
Community Discussion
No community discussion yet for this question.