On-premises servers must resolve private Route 53 hosted zone records, and AWS resources must resolve the on-premises corporate DNS zone. Which Route 53 Resolver feature pair enables both directions?
A.One inbound endpoint only
Inbound alone only solves on-prem → AWS resolution.
B.Inbound endpoint (on-prem → AWS) plus outbound endpoint with forwarding rules (AWS → on-prem)
Correct. Inbound + outbound endpoints enable the full hybrid DNS loop.
C.Public hosted zone for both directions
Public zones can't expose private-zone names to on-premises.
D.Route 53 health checks
Health checks monitor endpoints, not DNS forwarding.
Why this answer
Hybrid DNS needs both directions: an inbound endpoint gives on-premises resolvers an IP to query private zones; an outbound endpoint forwards AWS queries to on-premises DNS via forwarding rules. Both are needed for bidirectional resolution.
Correct answer: B · Last reviewed 2026-10-26
Official AWS references
Practice this interactively
Answer without seeing the solution first in the DNS & Edge Routing practice session.
Practice DNS & Edge Routing