EC2 instances in a VPC must resolve DNS names hosted in the on-premises DNS infrastructure. Which Route 53 Resolver component forwards these queries on-premises?
A.Inbound endpoint
Inbound lets on-prem resolve AWS names — wrong direction.
B.Outbound endpoint with forwarding rules for the on-prem domains
Correct. Outbound endpoint + forwarding rules.
C.A public hosted zone
Public zones host your records; they don't forward queries.
D.Resolver DNS Firewall
DNS Firewall filters queries; it doesn't route them.
Why this answer
Outbound endpoints carry queries FROM the VPC TO external resolvers — create forwarding rules matching the on-prem domains pointing at the on-prem DNS IPs. Inbound endpoints do the opposite (on-prem → AWS resolution).
Correct answer: B · Last reviewed 2026-11-02
Official AWS references
Practice this interactively
Answer without seeing the solution first in the DNS & Edge Routing practice session.
Practice DNS & Edge Routing