SOA-C03 practice question: Route 53 routing and Resolver (1 of 2)

Networking and Content Delivery A free question from our original SOA-C03 practice exam. Try it, then open the answer to see why each option is right or wrong.

A logistics broker connects its data center to a VPC with AWS Direct Connect. Instances in the VPC must resolve names in the on-premises domain corp.broker.example, and on-premises servers must resolve names in the Route 53 private hosted zone aws.broker.example associated with the VPC. The broker wants a managed solution without running its own DNS servers in AWS. Which TWO actions should a CloudOps engineer take? (Choose two.)

Choose two answers.

A. Associate the private hosted zone with the data center network through the Direct Connect virtual interface.
B. Change the VPC's DHCP options set so that instances use the on-premises DNS servers instead of the Amazon-provided DNS server.
C. Create a Route 53 Resolver inbound endpoint, and configure the on-premises DNS servers to forward aws.broker.example to its IP addresses.
D. Launch a pair of EC2 instances running BIND in the VPC to forward queries in both directions between the networks.
E. Create a Route 53 Resolver outbound endpoint and a forwarding rule that sends corp.broker.example queries to the on-premises DNS servers.

Show the answer and explanation

Answers: C, E

A. Wrong: Private hosted zones can be associated only with VPCs. On-premises networks reach them through a Resolver inbound endpoint. Learn more: Working with private hosted zones (opens in a new tab)
B. Wrong: Instances would then stop using Route 53 Resolver, so private hosted zone names would fail unless on-premises DNS forwarded them back. Resolver endpoints keep both working. Learn more: DHCP option sets in Amazon VPC (opens in a new tab)
C. Right: Correct. An inbound endpoint gives on-premises resolvers IP addresses in the VPC to send queries to. Resolver answers them from the private hosted zone associated with the VPC. Learn more: Forwarding inbound DNS queries to your VPCs (opens in a new tab)
D. Wrong: BIND servers can do this, but the broker would run, patch and make them highly available itself. Resolver endpoints provide the same forwarding as a managed service. Learn more: What is Route 53 Resolver? (opens in a new tab)
E. Right: Correct. The outbound endpoint lets Resolver send queries out of the VPC, and the forwarding rule, associated with the VPC, sends the on-premises domain to the on-premises DNS servers. Learn more: Forwarding outbound DNS queries to your network (opens in a new tab)

Explanation

Route 53 Resolver endpoints handle hybrid DNS in both directions. Outbound endpoints with forwarding rules send queries for on-premises domains to on-premises DNS servers, and inbound endpoints let on-premises DNS servers query private hosted zones. Both are managed and highly available across the subnets chosen for them.

SOA-C03 practice question: Route 53 routing and Resolver (1 of 2)

Explanation

Study

Keep practicing