Which solution allows the on-premises application to resolve the EC2 instance hostname?

A company is trying to connect two applications. One application runs in an on-premises data center that has a hostname of hostl .onprem.private. The other application runs on an Amazon EC2 instance that has a hostname of hostl.awscloud.private. An AWS Site-to-Site VPN connection is in place between the on-premises network and AWS.

The application that runs in the data center tries to connect to the application that runs on the EC2 instance, but DNS resolution fails. A SysOps administrator must implement DNS resolution between on-premises and AWS resources.

Which solution allows the on-premises application to resolve the EC2 instance hostname?
A . Set up an Amazon Route 53 inbound resolver endpoint with a forwarding rule for the onprem.private hosted zone. Associate the resolver with the VPC of the EC2 instance. Configure the on-premises DNS resolver to forward onprem.private DNS queries to the inbound resolver endpoint.
B . Set up an Amazon Route 53 inbound resolver endpoint. Associate the resolver with the VPC of the EC2 instance. Configure the on-premises DNS resolver to forward awscloud.private DNS queries to the inbound resolver endpoint.
C . Set up an Amazon Route 53 outbound resolver endpoint with a forwarding rule for the onprem.private hosted zone. Associate the resolver with the AWS Region of the EC2 instance. Configure the on-premises DNS resolver to forward onprem.private DNS queries to the outbound resolver endpoint.
D . Set up an Amazon Route 53 outbound resolver endpoint. Associate the resolver with the AWS Region of the EC2 instance. Configure the on-premises DNS resolver to forward awscloud.private DNS queries to the outbound resolver endpoint.

View Answer

Answer: A

Explanation:

Step-by-Step

Understand the Problem:

There are two applications, one in an on-premises data center and the other on an Amazon EC2 instance.

DNS resolution fails when the on-premises application tries to connect to the EC2 instance. The goal is to implement DNS resolution between on-premises and AWS resources.

Analyze the Requirements:

Need to resolve the hostname of the EC2 instance from the on-premises network. Utilize the existing AWS Site-to-Site VPN connection for DNS queries.

Evaluate the Options:

Option A: Set up an Amazon Route 53 inbound resolver endpoint with a forwarding rule for the onprem.private hosted zone.

This allows DNS queries from on-premises to be forwarded to Route 53 for resolution.

The resolver endpoint is associated with the VPC, enabling resolution of AWS resources.

Option B: Set up an Amazon Route 53 inbound resolver endpoint without specifying the forwarding rule.

This option does not address the specific need to resolve onprem.private DNS queries.

Option C: Set up an Amazon Route 53 outbound resolver endpoint.

Outbound resolver endpoints are used for forwarding DNS queries from AWS to on-premises, not vice versa.

Option D: Set up an Amazon Route 53 outbound resolver endpoint without specifying the forwarding rule.

Similar to Option C, this does not meet the requirement of resolving on-premises queries in AWS.

Select the Best Solution:

Option A: Setting up an inbound resolver endpoint with a forwarding rule for onprem.private and associating it with the VPC ensures that DNS queries from on-premises can resolve AWS resources effectively.

Reference: Amazon Route 53 Resolver

Integrating AWS and On-Premises Networks with Route 53

Using an Amazon Route 53 inbound resolver endpoint with a forwarding rule ensures that on-premises applications can resolve EC2 instance hostnames effectively.