Configuring Separate DNS Server
Question
An online educational institute is using Hybrid architecture for its application servers.
They use existing DNS servers deployed at on-premises data centers to resolve queries from servers hosted in VPC.
Outbound Endpoints are created for this purpose for the entire domain name resolution.
A new subdomain is created for testing new training programs.
Dev-ops teams do not want on-premise DNS servers to resolve queries for this subdomain, but it should be handled locally within VPC.Which of the following rules can be configured to use a separate DNS server for a new subdomain?
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B. C. D.Correct Answer - C.
By creating System rules, specific subdomains are resolved locally by resolvers instead of forwarding these queries to on-premises DNS servers.
When conditional forwarding rules are created for a domain, it would apply to domains & all subdomains & forward to on-premises DNS resolvers.
System rules can be created to override this behavior for one of the sub-domain & resolve it locally.
Option A is incorrect as Custom rules are of a single type which is conditional forwarding rules.
These would forward all requests to an on-premises DNS resolver.
Option B is incorrect as Conditional Forwarding rules would forward all requests to on-premises DNS resolver.
Option D is incorrect as Resolver automatically creates recursive rules for all domains not created by custom rules.
For more information on creating rules for AWS Route 53 Resolver, refer to the following URL.
https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resolver.htmlThe requirement in this scenario is to use a separate DNS server for a new subdomain and not use the on-premise DNS servers for this particular subdomain. This can be achieved by configuring a conditional forwarding rule for the new subdomain.
A conditional forwarding rule allows the DNS resolver to forward queries for a specific domain name to a designated DNS server. In this case, the DNS resolver in the VPC can be configured to forward queries for the new subdomain to a separate DNS server hosted within the VPC, thus bypassing the on-premise DNS servers.
Option A, creating a custom rule for the new subdomain, is not a valid option because it is too generic and does not specify any particular action to be taken for the subdomain.
Option C, creating a system rule for the new subdomain, is not a valid option because there is no such thing as a "system rule" in DNS.
Option D, creating a recursive rule for the new subdomain, is not a valid option because recursive DNS is used to resolve queries for any domain name, not just a specific subdomain. Additionally, it does not address the requirement of using a separate DNS server for the subdomain.
Therefore, the correct option is B, creating a conditional forwarding rule for the new subdomain.
