Route 53 Flashcards
1
Q
What does a “Route 53 Resolver” achieve?
A
Allows bi-directional querying (AWS / on-prem) over private connections
2
Q
How does DNSSEC use “keys,” and can you modify them?
A
When you enable DNSSEC, R53 creates a key-signing key. You can add a second (customer-managed) one. If you want to delete a key, you have to render it inactive first.
3
Q
What does the Route 53 Application Recovery Controller do, and how?
A
Checks availability and manages failover of applications via readiness checks and routing control.
4
Q
How does R53 manage “Domain Delegation?”
A
Transferring authority for a domain (or subdomain) from one DNS server to another. In authoritative servers, create an NS record for the subdomain and list a different set of DNS servers
