SAA-C03 Q664 · DNS

Question

A company runs an internet-facing web application on AWS and uses Amazon Route 53 with a public hosted zone. The company wants to log DNS response codes to support future root cause analysis. Which solution will meet these requirements?

Accepted Answer

**Route 53 Query Logging** is the purpose-built feature for this exact use case.

**Step-by-step requirement matching:**

1. **Requirement: Log DNS response codes** → Route 53 query logging captures detailed information about each DNS query received by Route 53, including:
   - The domain or subdomain requested
   - The date and timestamp
   - The DNS record type (A, AAAA, CNAME, etc.)
   - The Route 53 edge location that responded
   - **The DNS response code (NOERROR, SERVFAIL, NXDOMAIN, etc.)**
   - The protocol (UDP or TCP)

2. **Requirement: Public hosted zone** → Query logging is available for **public hosted zones**. The logs are sent to **Amazon CloudWatch Logs** log groups.

3. **Requirement: Support future root cause analysis** → Having these logs stored in CloudWatch Logs allows

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips