Route 53 Flashcards

This deck aims to help retain concepts related to the AWS Route 53 service.

1
Q

What are the main features of a Route 53 Public Hosted Zone?

A
  • Accessible from both the public internet and VPCs
  • Authoritative for a specific domain
  • Externally registered domains can point to a Route 53 Public Hosted Zone
  • Hosts DNS records (e.g. A, AAAA, MX, NS, TXT)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
1
Q

Which Route 53 component contains information about how to route traffic on the internet for a specific domain and its subdomains?

A

Public Hosted Zone

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What Route 53 feature allows DNS resolution for internal resources accessible only within specified VPCs?

A

Private Hosted Zone

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are the main features of a Route 53 Private Hosted Zone?

A
  • Inaccessible from the public internet
  • Accessible only from associated VPCs (from current account or other accounts)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What instructions reside in authoritative DNS servers and provide information about a domain, including the associated IP address and how to handle requests for that domain?

A

DNS Records

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

When creating a DNS record in Route 53, what configurations must be provided?

A
  • Record Name (e.g., accounting.example.com),
  • Record Type (e.g., A)
  • Record Value (e.g. 229.44.81.208)
  • TTL in seconds (e.g., 300)
  • Routing Policy (e.g., simple routing)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Which architectural approach allows the DNS server to respond differently to the same DNS query based on the source of the query (public or private)?

A

Split-view DNS

Hosted Zones (Public and Private) can mirror their records, but additional subdomains may only be accessible from VPCs associated with a Private Hosted Zone and not from the Public

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is the difference between CNAME and ALIAS record types?

A
  • CNAME maps a name to another name (e.g. www.example.com to example.com) and cannot be used for the apex domain (e.g. example.com)
  • ALIAS is an AWS-specific record type used only in Route 53 that maps a name to an AWS resource (e.g. example.com to an Elastic Load Balancer, API Gateway, CloudFront, Elastic Beanstalk, Global Accelerator, S3), it can be used for the apex domain, incurs no additional cost, and is the default choice for routing traffic to AWS services
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What types of Route 53 Health Checks are available?

A
  • Endpoint health check
  • Calculated health check (monitors status of other health checks)
  • State of CloudWatch alarms health check
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Are Route 53 Health Checks configured within Route 53 records?

A

Health Checks are configured separately but are used by Route 53 records

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Which Route 53 feature monitors the health and performance of web applications, web servers, and other resources?

A

Route 53 Health Checks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How are Route 53 Health Checks performed, and how frequently?

A

Health checks are performed every 30 seconds (default), or every 10 seconds (with additional cost), by globally distributed health checkers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Which protocols are supported for Route 53 Health Checks?

A
  • TCP
  • HTTP/HTTPS
  • HTTP/HTTPS with String Matching
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What criteria does Route 53 use to determine if an endpoint is healthy?

A

An endpoint is considered healthy if 18% or more of health checkers report that the endpoint is healthy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Does Route 53 return records that fail Health Checks?

A

No, unhealthy record is not returned in DNS queries, an SNS topic can be configured to trigger notifications when an endpoint is unhealthy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What determines how Route 53 responds to DNS queries?

A

Routing Policy

14
Q

Which Route 53 Routing Policy is used to direct traffic to a single resource, such as a web server?

A

Simple Routing policy

14
Q

What types of Routing Policies are available in Route 53?

A
  • Simple Routing
  • Failover Routing
  • Multi-value Routing
  • Weighted Routing
  • Latency Routing
  • Geolocation Routing
  • Geoproximity Routing
15
Q

Name a Route 53 Routing Policy with the following characteristics:
- Can create records in a private hosted zone
- One record per name
- Each record can have multiple values returned in random order
- The client selects and uses one value
- Does not support health checks

A

Simple Routing Policy

16
Q

Which Route 53 routing policy is used for an active-passive failover configuration?

A

Failover Routing Policy

17
Q

Name a Route 53 Routing Policy with the following characteristics:
- Can create records in a private hosted zone
- Supports multiple records per name (primary and secondary)
- Includes health checks (typically on the primary record)
- Returns the secondary record if the primary record is unhealthy

A

Failover Routing Policy

18
Q

Which Route 53 Routing Policy responds to DNS queries with up to eight healthy randomly selected records?

A

Multi-value Routing Policy

19
Q

Name a Route 53 Routing Policy with the following characteristics:
- Can create records in a private hosted zone
- Functions like a combination of simple and failover routing
- Supports multiple records with the same name
- Each record returns a different value
- Each record can have an associated health check
- Returns up to 8 healthy records (randomly selected) to the client
- Aims to improve availability (typically used for active-active workloads)

A

Multi-value Routing Policy

20
Q

Which Route 53 Routing Policy is used to route traffic to multiple resources in specified proportions?

A

Weighted Routing Policy

21
Q

Name a Route 53 Routing Policy with the following characteristics:
- Can create records in a private hosted zone
- Supports multiple records with the same name
- Each record can have an associated weight (total of 100)
- Records with a weight of 0 are never returned (unless all records are set to 0)
- Can be combined with health checks (the process is repeated until a healthy record is chosen)
- Used for load balancing and testing new versions of software

A

Weighted Routing Policy

22
Q

Which Route 53 Routing Policy routes traffic to the resources that provide the lowest latency across multiple AWS Regions?

A

Latency Routing Policy

23
Q

Name a Route 53 Routing Policy with the following characteristics:
- Can create records in a private hosted zone
- Supports multiple records with the same name
- Each record can be associated with an AWS Region
- AWS maintains a database of latencies between different regions
- The record with the lowest latency is selected and returned
- Can be combined with health checks (returns a healthy record that provides the lowest latency)
- Used to optimize performance and user experience

A

Latency Routing Policy

24
Q

Which Route 53 Routing Policy routes traffic based on users’ locations?

A

Geolocation Routing Policy

25
Q

Name a Route 53 Routing Policy with the following characteristics:
- Can create records in a private hosted zone
- Each record is tagged with a location ISO code (country, continent, default)
- IP checks verify the users’ location (normally the resolver)
- Returns relevant records (not necessarily the closest)
- If no location matches, the default record is returned
- If no default record is set, nothing is returned
- Used to restrict content, enforce regional restrictions, provide language-specific content, and load balance across regional endpoints based on customer location

A

Geolocation Routing Policy

26
Q

Which Route 53 Routing Policy routes traffic based on the location of resources and can optionally shift traffic between resources in different locations?

A

Geoproximity Routing Policy

27
Q

Name a Route 53 Routing Policy with the following characteristics:
- Can create records in a private hosted zone
- Each record can be tagged with an AWS Region or coordinates
- Directs user requests to the closest resources
- Adding a “+” bias to rules increases the size of the region and decreases the size of neighboring regions

A

Geoproximity Routing Policy

28
Q

What DNS feature authenticates responses to domain name lookups, preventing attackers from manipulating or poisoning the responses, but does not provide privacy protections for those lookups?

A

Domain Name System Security Extensions (DNSSEC)

29
Q

What are the benefits of using DNSSEC?

A
  • Origin authentication (data origin verification)
  • Data integrity protection (prevents data modification in transit)
  • Provides a cryptographically verifiable DNS chain of trust (from DNS root zone to DNS records)
  • Helps protect against poisoned DNS caches, which could return malicious IP addresses from DNS queries
30
Q

What is the resiliency posture of the AWS Route 53 service?

A

Route 53 is a Globally resilient service