Task 1.2: Design DNS Solutions That Meet Public, Private, and Hybrid Requirements ANS-C01 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   A company has multiple VPCs in the same AWS account and wants to use a single Route 53 private hosted zone to resolve custom domain names for resources in all VPCs. What is required to enable this?

   • ACreate a separate private hosted zone for each VPC
   • BUse a public hosted zone with the same domain name
   • CEnable DNS resolution in each VPC's DHCP options
   • DAssociate the private hosted zone with each VPC
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   A company wants to protect its public DNS zone from DNS spoofing and cache poisoning attacks. Which Route 53 feature should be enabled to add cryptographic signatures to DNS records?

   • ATraffic flow policies
   • BHealth checks
   • CRoute 53 Resolver DNS Firewall
   • DDNSSEC signing
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   A company wants to reduce the number of DNS queries that reach its authoritative DNS servers by allowing resolvers to cache responses longer. Which DNS setting should be adjusted?

   • ARouting policy
   • BHealth check interval
   • CTTL (Time to Live)
   • DRecord type
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company runs a global e-commerce application behind an Application Load Balancer (ALB) in us-east-1 and a second ALB in eu-west-1. They want to route users to the region with the lowest latency, but they also need to maintain a stable DNS name for the application. The company uses Amazon Route 53 as their DNS provider. What should they do?

   • ACreate a geolocation routing policy record set with the two ALB DNS names as targets.
   • BCreate a latency-based routing policy record set with the two ALB DNS names as targets.
   • CCreate an alias record set pointing to the ALB in us-east-1 and rely on Route 53 edge locations to optimize latency.
   • DCreate a weighted routing policy record set with the two ALB DNS names as targets.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   A company wants to route traffic for its public website to an Application Load Balancer (ALB) using Amazon Route 53. Which Route 53 record type should be used to directly reference the ALB's DNS name without needing to know its IP address?

   • ACNAME record to the ALB's DNS name
   • BA record with the ALB's public IP address
   • CAlias record to the ALB's DNS name
   • DSRV record with the ALB's DNS name and port 443
   Reveal Solution Discussion Select an answer first