A network engineer is designing the DNS architecture for a new AWS environment. The environment must be able to resolve DNS names of endpoints on premises, and the on-premises systems must be able to resolve the names of AWS endpoints. The DNS architecture must give individual accounts the ability to manage subdomains. The network engineer needs to create a single set of rules that will work across multiple accounts to control this behavior. In addition, the network engineer must use AWS native services whenever possible. Which combination of steps should the network engineer take to meet these requirements? (Choose three.)
Select 3 answers.
Marked answer: C
This question asks for 3 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Community Discussion
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Chose ACF2
closest one... but still wrong.... no network require for PHZ and resolver rule to communicate... also no need to inbound endpoint for internal subdomain.... that should be done through PHZ associations
Chose ACF1
I not satisfied with F which says "Ensure that networking exists between the other accounts and the central account so that traffic can reach the Route 53 Resolver endpoints." : AFAIK no network is necessary to access cross-account endpoints with Route53 rules !?
