Task 2.3: Implement Complex Hybrid and Multi-Account DNS Architectures ANS-C01 Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A company has a hybrid network with an AWS VPC and an on-premises data center connected via AWS Direct Connect. On-premises DNS servers are authoritative for corp.example.com. VPC instances need to resolve corp.example.com, and on-premises clients need to resolve a private hosted zone for aws.example.com in the VPC. Which architecture should you implement?

   • ACreate only an outbound Resolver endpoint in the VPC and configure on-premises DNS servers to forward aws.example.com to the VPC's DNS.
   • BCreate an inbound Resolver endpoint in the VPC and an outbound Resolver endpoint in the VPC, with forwarding rules in both directions.
   • CUse a single Resolver endpoint that handles both inbound and outbound traffic.
   • DCreate only an inbound Resolver endpoint in the VPC and configure VPC instances to use the on-premises DNS servers directly.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A company has a public hosted zone for example.com and a private hosted zone for example.com associated with a VPC. They also have an on-premises DNS server that is authoritative for corp.example.com. They want VPC instances to resolve example.com using the private hosted zone, and corp.example.com using the on-premises server. External users should resolve example.com using the public hosted zone. Which configuration is required?

   • AAssociate the private hosted zone with the VPC and create an outbound Resolver endpoint with a forwarding rule for corp.example.com.
   • BUse a single Resolver endpoint for both inbound and outbound traffic.
   • CCreate a forwarding rule for example.com to the on-premises server and use the public hosted zone for external queries.
   • DCreate a private hosted zone for corp.example.com and associate it with the VPC.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   In a hybrid DNS architecture, what is the primary purpose of a conditional forwarding rule in Route 53 Resolver?

   • ATo provide DNS resolution for private hosted zones
   • BTo cache DNS responses to reduce latency
   • CTo block DNS queries for malicious domains
   • DTo route DNS queries for specific domains to designated DNS servers
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which Route 53 routing policy is commonly used with health checks to implement DNS failover?

   • AGeolocation routing policy
   • BWeighted routing policy
   • CFailover routing policy
   • DLatency routing policy
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Can a private hosted zone be associated with a VPC in a different AWS account?

   • ANo, private hosted zones cannot be associated with any VPC
   • BYes, using VPC association with the VPC ID and account ID
   • CYes, but only if the VPC is in the same region
   • DNo, private hosted zones can only be associated with VPCs in the same account
   Reveal Solution Discussion Select an answer first