A company requires a hybrid DNS resolution strategy. On-premises servers must resolve AWS private hosted zones, and Amazon EC2 instances must resolve on-premises domain names. The company has an AWS Direct Connect connection. Which combination of steps will meet these requirements? (Select TWO)

Answer options:

Create an Amazon Route 53 Resolver Inbound Endpoint in the VPC and configure on-premises DNS to forward queries to it.

Configure the DHCP options set in the VPC to point to the on-premises DNS servers.

Create an Amazon Route 53 Resolver Outbound Endpoint in the VPC and create a Route 53 forwarding rule to the on-premises DNS servers.

Deploy a BIND DNS server on an EC2 instance to act as a forwarder.

Enable DNS resolution on the Direct Connect connection.

Create a Route 53 public hosted zone for the on-premises domain.

How to approach this question

Identify the managed AWS service for hybrid DNS.

Full Answer

Create an Amazon Route 53 Resolver Inbound Endpoint in the VPC and configure on-premises DNS to forward queries to it., Create an Amazon Route 53 Resolver Outbound Endpoint in the VPC and create a Route 53 forwarding rule to the on-premises DNS servers.

Amazon Route 53 Resolver Endpoints (Inbound and Outbound) are the native, managed solution for bidirectional hybrid DNS resolution over Direct Connect or VPN.

Common mistakes

Changing the DHCP options set, which breaks native AWS service resolution.

Question 21 All questions Question 23

Practice the full AWS Solutions Architect Professional SAP-C02 Practice Exam 7

75 questions · hints · full answers · grading

More questions from this exam

Q01A global enterprise is designing a multi-region network architecture connecting 50 AWS accounts a...Hard Q02A company is migrating its hybrid network to AWS. They have two 10 Gbps AWS Direct Connect connec...Hard Q03An enterprise has 100 AWS accounts in AWS Organizations. The security team mandates that all Amaz...Medium Q04A financial company requires that all EBS volumes, S3 buckets, and RDS databases be encrypted usi...Easy Q05An enterprise is designing a disaster recovery strategy for a critical application running on Ama...Hard

View all 75 questions →