nerdexam
Amazon

SAP-C02 · Question #858

A company's DNS setup includes an on-premises network that is connected to a VPC by an AWS Site-to-Site VPN connection. The on-premises network hosts the domain onprem.mydc.com. The company needs to…

The correct answer is A. Create a Route 53 private hosted zone for myvpc.example.com. Associate the private hosted D. Create a Route 53 Resolver outbound endpoint. E. Create a forwarding rule in Route 53 Resolver for the on-premises domain. In the forwarding rule. Private hosted zone for myvpc.example.com so the VPC is authoritative for that domain. Resolver outbound endpoint lets the VPC send DNS queries out to on-premises resolvers. Forwarding rule for onprem.mydc.com to on-prem DNS IPs so EC2 instances in the VPC can resolve the…

Submitted by javi_es· Mar 6, 2026Design Solutions for Organizational Complexity

Question

A company's DNS setup includes an on-premises network that is connected to a VPC by an AWS Site-to-Site VPN connection. The on-premises network hosts the domain onprem.mydc.com. The company needs to use Amazon Route 53 to host the domain myvpc.example.com in the VPC. Additionally, the company needs Amazon EC2 instances in the VPC to resolve DNS queries to the on-premises domain. Which combination of steps will meet these requirements? (Choose three.)

Options

  • ACreate a Route 53 private hosted zone for myvpc.example.com. Associate the private hosted
  • BCreate a Route 53 public hosted zone for myvpc.example.com. Associate the public hosted zone
  • CCreate a Route 53 Resolver inbound endpoint.
  • DCreate a Route 53 Resolver outbound endpoint.
  • ECreate a forwarding rule in Route 53 Resolver for the on-premises domain. In the forwarding rule,
  • FCreate a system rule in Route 53 Resolver for the on-premises domain. In the system rule,

How the community answered

(15 responses)
  • A
    80% (12)
  • B
    13% (2)
  • C
    7% (1)

Explanation

Private hosted zone for myvpc.example.com so the VPC is authoritative for that domain. Resolver outbound endpoint lets the VPC send DNS queries out to on-premises resolvers. Forwarding rule for onprem.mydc.com to on-prem DNS IPs so EC2 instances in the VPC can resolve the on-prem domain through the outbound endpoint.

Community Discussion

No community discussion yet for this question.

Full SAP-C02 Practice