Correct Answer: Route 53 Application Recovery Controller (ARC) routing control states
Route 53 Application Recovery Controller (ARC) routing controls allow you to manually trigger failover by changing the state of routing controls (on/off). These control states are ...
Correct Answer
Route 53 Application Recovery Controller (ARC) routing control states
Why This Answer Is Correct
Route 53 Application Recovery Controller (ARC) routing controls allow you to manually trigger failover by changing the state of routing controls (on/off). These control states are hosted on a highly available, independent cluster across multiple regions, ensuring traffic shifting can be initiated reliably even if the target region is down.
This question evaluates your knowledge of Amazon Route 53 — a core concept tested in AWS Certified Solutions Architect – Professional (SAP-C02). Understanding Amazon Route 53 is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Your organization is hosting a globally available application. You want to route users to the closest healthy endpoint while automatically failing over to a secondary region if the primary region's health check fails. Which Route 53 routing policy and configuration should you use?
A financial services company has migrated its core application to two AWS regions: us-west-2 (Oregon) and eu-west-1 (Ireland). They want to route global users to the closest region using Amazon Route 53. However, due to compliance reasons, they need to route 80% of traffic originating from South America to the Oregon region, even though Ireland is physically closer to some Eastern parts of South America. What is the most effective Route 53 configuration to achieve this?
An enterprise uses Amazon Route 53 Private Hosted Zones (PHZs) inside a VPC for name resolution of database endpoints. The main database is hosted in us-east-1, and a replica is in us-west-2. On-premises datacenters resolve endpoints using Route 53 Inbound Resolvers. They want to set up an active-passive failover for the database endpoint (db.corp.internal) using Route 53. What configuration must they implement to ensure proper failover resolution for both VPC resources and on-premises users?
A security architect wants to prevent data exfiltration via DNS tunneling from EC2 instances running in a VPC. The instances use the default VPC DNS resolver (AmazonProvidedDNS). The architect needs to block outbound DNS queries to known malicious domains and dynamic DNS hosts, while allowing access to internal domains and AWS endpoints. What is the most operationally efficient way to implement this?