nerdexam
Amazon

SAP-C02 · Question #545

A company plans to deploy a new private intranet service on Amazon EC2 instances inside a VPC. An AWS Site-to-Site VPN connects the VPC to the company's on-premises network. The new service must…

The correct answer is B. Turn on DNS hostnames for the VPC. Configure a new outbound endpoint with Amazon Route 53. Outbound resolver endpoints will let you query your onprem DNS Inbound resolver endpoints will let your onprem DNS server to query the AWS VPC DNS server

Submitted by eva_at· Mar 6, 2026Design for New Solutions

Question

A company plans to deploy a new private intranet service on Amazon EC2 instances inside a VPC. An AWS Site-to-Site VPN connects the VPC to the company's on-premises network. The new service must communicate with existing on-premises services. The on-premises services are accessible through the use of hostnames that reside in the company.example DNS zone. This DNS zone is wholly hosted on premises and is available only on the company's private network. A solutions architect must ensure that the new service can resolve hostnames on the company.example domain to integrate with existing services. Which solution meets these requirements?

Options

  • ACreate an empty private zone in Amazon Route 53 for company.example. Add an additional NS
  • BTurn on DNS hostnames for the VPC. Configure a new outbound endpoint with Amazon Route 53
  • CTurn on DNS hostnames for the VPConfigure a new inbound resolver endpoint with Amazon
  • DUse AWS Systems Manager to configure a run document that will install a hosts file that contains

How the community answered

(35 responses)
  • A
    6% (2)
  • B
    51% (18)
  • C
    14% (5)
  • D
    29% (10)

Explanation

Outbound resolver endpoints will let you query your onprem DNS Inbound resolver endpoints will let your onprem DNS server to query the AWS VPC DNS server

Community Discussion

No community discussion yet for this question.

Full SAP-C02 Practice