SAA-C03 · Question #653
SAA-C03 Question #653: Real Exam Question with Answer & Explanation
The correct answer is A: Create a Route 53 inbound endpoint. Ensure that security groups and routing allow the traffic. To let on-premises servers resolve records in a Route 53 private hosted zone, you must create a Route 53 Resolver inbound endpoint in the VPC. Then you configure the on-premises DNS servers to conditionally forward queries for the private zone’s domain (for example, internal.exam
Question
A company has a hybrid environment. The company has set up an AWS Direct Connect connection between the company's on-premises data center and a workload that runs in a VPC. The company uses Amazon Route 53 for DNS on AWS. The company uses a private hosted zone to manage DNS names for a set of services that are hosted on AWS. The company wants the on-premises servers to use Route 53 for DNS resolution of the private hosted zone. Which solution will meet these requirements?
Options
- ACreate a Route 53 inbound endpoint. Ensure that security groups and routing allow the traffic
- BCreate a Route 53 outbound endpoint. Ensure that security groups and routing allow the traffic
- CEdit the private hosted zone in Route 53 with a TXT record that references the on-premises DNS
- DEdit the private hosted zone in Route 53 with a PTR record that references the on-premises DNS
Explanation
To let on-premises servers resolve records in a Route 53 private hosted zone, you must create a Route 53 Resolver inbound endpoint in the VPC. Then you configure the on-premises DNS servers to conditionally forward queries for the private zone’s domain (for example, internal.example.com) to the IP addresses of that inbound endpoint over the Direct Connect link. This enables on-prem DNS to use Route 53 as the authority for that private namespace.
Community Discussion
No community discussion yet for this question.