Task 2.3: Implement Complex Hybrid and Multi-Account DNS Architectures ANS-C01 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company has a multi-account AWS environment with several VPCs using private hosted zones. They are troubleshooting DNS resolution failures and need to see which VPC is querying which domain. Which service should they enable?

   • AEnable AWS Config rules for Route 53.
   • BEnable Route 53 Resolver query logging for the VPCs.
   • CEnable AWS CloudTrail for Route 53.
   • DEnable VPC Flow Logs for each VPC.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which component of Route 53 Resolver is used to define conditional forwarding rules?

   • APrivate hosted zone
   • BTraffic policy
   • CResolver rule
   • DHealth check
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   A company wants to centralize DNS management across multiple AWS accounts. Which Route 53 feature is designed to allow a private hosted zone to be shared with other accounts?

   • AVPC associations
   • BRoute 53 health checks
   • CRoute 53 Resolver endpoints
   • DRoute 53 traffic policies
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which Route 53 Resolver endpoint type is used to allow DNS queries from on-premises DNS servers to be forwarded to AWS VPCs?

   • AOutbound endpoint
   • BPrivate hosted zone
   • CInbound endpoint
   • DResolver rule
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What type of information is typically included in Route 53 DNS query logs?

   • AThe contents of the DNS response packet
   • BThe domain name queried, the response, and the source IP address
   • CThe AWS account ID of the querying user
   • DThe DNS server's configuration
   Reveal Solution Discussion Select an answer first