Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
AWS Certified Advanced Networking - Specialty · AWS
Select 3 answers.
This question asks for 3 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
only BCF represents a valid technical solution that would allow on-premises systems to reach VPC endpoints while ensuring public DNS queries go through the on-premises security solution.
Correct combination of steps is B, D, and F. The company needs to route all public DNS queries through their on-premises DNS security solution, except for AWS service endpoints. This requires: - Setting up a new DHCP options set with the on-premises DNS server as the primary DNS resolver (option B). - Creating a Route 53 Resolver outbound endpoint to forward DNS queries from the VPC to the on-premises network (option D). - Creating a forwarding rule for the root domain "." to send all DNS queries to the on-premises DNS security solution (option F).
E is not needed as it's already there. The company's security team HAS allowed an exception for the AWS service endpoints because the company is using VPC endpoints to access AWS services.