Route 53 Resolver DNS Firewall Quiz

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering Network Security Services

What you'll be asked

  1. What is the primary purpose of AWS Route 53 Resolver DNS Firewall?
  2. When configuring a Domain List in DNS Firewall, which two actions can you assign to a rule?
  3. If a domain is matched against multiple rules in an active DNS Firewall rule group, how does the service determine which action to take?
  4. You have a requirement to log all DNS queries that match a specific block list, but you do not want to stop the traffic yet. Which action should you choose?
  5. You have created a DNS Firewall rule group and associated it with a VPC. A developer reports that a specific internal domain is being blocked. You check the logs and see 'NXDOMAIN' responses. What is the most likely configuration issue?

Answers and explanations come after you submit.