ANS-C01 Question 52

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A2

  Option A creates a private hosted zone in the shared services account with an alias record that points to the interface endpoint. This allows DNS resolution of the endpoint to be restricted to the Amazon Route 53 private hosted zone. By disabling the private DNS name of the interface endpoint, DNS resolution is further restricted to only the private hosted zone, which prevents traffic from leaking out onto the public internet. Associating the private hosted zone with the spoke VPCs in each AWS account ensures that all network traffic destined for the interface endpoint is routed through the shared services account. This centralized model simplifies administration and reduces complexity by allowing a single point of management for all interface endpoints and Route 53 zones in the shared services account.

• 1

  A is answer!!!

• Chose A3

  A is the correct answer. Instead of using the service-created private hosted zone that is associated with the endpoint creation, we you need to manually create it to have the flexibility of sharing it with other VPC's. That is done by disabling private dns name for the endpoint.