A company is designing a hybrid network architecture to connect multiple spoke VPCs in the us-west-2 Region to their on-premises datacenter. The network design must satisfy the following requirements:
- Enable transitive VPC-to-VPC routing and hybrid VPC-to-premises routing.
- Resolve private DNS domains bidirectionally between the AWS environment and the on-premises datacenter.
- Maintain high availability and minimize single points of failure.
Which of the following actions should the Solutions Architect take to satisfy these requirements? (Select TWO.)
- Associate the AWS Transit Gateway with the Direct Connect Gateway, and establish a Transit Virtual Interface (Transit VIF) on the Direct Connect connection to connect to the Direct Connect Gateway.Cevap
- Deploy Route 53 Resolver Inbound Endpoints in a shared services VPC to receive DNS queries from the on-premises datacenter, and configure Route 53 Resolver Outbound Endpoints to forward AWS internal DNS queries for on-premises domains to the on-premises DNS servers.Cevap
- CConnect the Direct Connect Gateway directly to the Virtual Private Gateway (VGW) of each spoke VPC using Private Virtual Interfaces (Private VIFs) to enable transitive routing between the VPCs.
- DConfigure the on-premises DNS servers to forward queries for the AWS Private Hosted Zone (PHZ) directly to the AWS default resolver IP address () over the Direct Connect connection.
- EDeploy a single NAT Gateway in a shared services VPC, and route all hybrid DNS queries and private network traffic through it to the on-premises datacenter.
Cevap
To satisfy the requirements, the Solutions Architect must associate the AWS Transit Gateway with the Direct Connect Gateway using a Transit VIF, and deploy Route 53 Resolver Inbound and Outbound Endpoints to facilitate private DNS resolution.
Associating the AWS Transit Gateway with the Direct Connect Gateway using a Transit VIF enables transitive routing between the on-premises datacenter and multiple VPCs. Configuring Route 53 Resolver Inbound and Outbound Endpoints enables private bidirectional DNS resolution between AWS and on-premises networks over the private connection.
Adım Adım Çözüm
Anahtar Kavram
Hybrid network routing and DNS resolution using Transit Gateway and Route 53 Resolvers.
Tahmini Süre:2m 0s