DNS Firewall with Route 53 Quiz

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering Network Security Services

What you'll be asked

  1. What is the primary function of Amazon Route 53 Resolver DNS Firewall?
  2. When configuring a DNS Firewall rule group, what are the two possible actions you can take when a query matches a domain list?
  3. An administrator wants to block all queries to a specific list of malicious domains while allowing everything else. Which component must they create first?
  4. If you set an action to 'BLOCK' with a response of 'NODATA' for a domain, what will the client receive when it queries that domain?
  5. You have multiple Rule Groups associated with a VPC. If a domain appears in both a rule group with an 'ALLOW' action (priority 100) and a rule group with a 'BLOCK' action (priority 200), what is the final outcome for that domain?

Answers and explanations come after you submit.