Task 2.3: Implement Complex Hybrid and Multi-Account DNS Architectures ANS-C01 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the purpose of associating a private hosted zone with a VPC?

   • ATo enable DNS logging for the VPC
   • BTo make the hosted zone publicly accessible
   • CTo enable DNS resolution for the domain within that VPC
   • DTo create a VPN connection to the VPC
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   A company has a hybrid DNS architecture where on-premises DNS servers and Amazon Route 53 private hosted zones must resolve each other's domains. Which AWS service or feature is specifically designed to forward DNS queries between these two environments?

   • AAWS Direct Connect with a private virtual interface
   • BAWS Transit Gateway with DNS support
   • CAmazon CloudFront with a custom origin
   • DRoute 53 Resolver
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which AWS service can be used to enable DNS query logging for Route 53?

   • AAWS CloudTrail
   • BAmazon CloudWatch Logs
   • CAmazon S3
   • DAmazon Kinesis Data Streams
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company has a VPC in us-east-1 with a private hosted zone for example.com. On-premises DNS servers are authoritative for example.corp and are reachable at 10.0.0.53. The VPC's CIDR is 10.1.0.0/16. You need to ensure that EC2 instances in the VPC can resolve names in example.corp. Which configuration should you use?

   • ACreate an inbound Resolver endpoint in the VPC and configure on-premises DNS servers to forward example.corp queries to it.
   • BCreate a private hosted zone for example.corp in the same account and associate it with the VPC.
   • CAssociate the private hosted zone for example.com with the VPC and add a CNAME record for example.corp.
   • DCreate an outbound Resolver endpoint in the VPC and add a forwarding rule for example.corp that targets the on-premises DNS servers.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A company has a VPC with an outbound Resolver endpoint. They have configured a forwarding rule for corp.example.com to on-premises DNS servers. They are experiencing intermittent resolution failures for corp.example.com. They have enabled Resolver query logging. What should they check first?

   • ACheck the Resolver query logs to see if queries are being forwarded and what responses are returned.
   • BCheck the Route 53 hosted zone for corp.example.com.
   • CCheck the VPC Flow Logs to see if traffic is reaching the on-premises DNS servers.
   • DCheck the security group rules for the outbound Resolver endpoint.
   Reveal Solution Discussion Select an answer first