AWS ROUTE 53 - REGISTERING A DOMAIN EXAM

PDF Download

AWS ROUTE 53 - REGISTERING A DOMAIN EXAM

QUESTIONS

Actual Qs and Ans Expert-Verified Explanation

This Exam contains:

-Guarantee passing score -19 Questions and Answers -format set of multiple-choice -Expert-Verified Explanation Question 1: Is there a limit to the number of domains I can manage using Amazon Route 53?

Answer:

Each new Amazon Route 53 account is limited to a maximum of 50 domains .Complete our request form for a higher limit and we will respond to your request within two business days.

Question 2: Do I have to use Route 53 as Domain Name Registrar?

Answer:

No, you can register the domain name somewhere else (e.g. GoDaddy) but host it in AWS.

Question 3: Does Amazon Route 53 DNS support DNSSEC?

Answer:

Amazon Route 53's DNS services does NOT support DNSSEC at this time .However, our domain name registration service supports configuration of signed DNSSEC keys for domains when DNS service is configured at another provider

.See https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/domain-configure-dnssec.html

Question 4: Can I register domain names with Amazon Route 53?

Answer:

Yes. You can use the AWS Management Console or API to register new domain names with Route 53.You can also request to transfer in existing domain names from other registrars to be managed by Route 53. Domain name registration services are provided under our Domain Name Registration Agreement.Question 5: How do I transfer my existing domain name registration to Amazon Route 53 without disrupting my existing web traffic?

Answer:

Perform the following steps:

1) you need to get a list of the DNS record data for your domain name , generally available in the form of a "zone file" that you can get from your existing DNS provider.

2) With the DNS record data in hand, you can use Route 53's Management Console or simple web-services interface to create a hosted zone that can store the DNS records for your domain name and follow its transfer process , which will include such steps as updating the name servers for your domain name to the ones associated with your hosted zone .

3) To complete the domain name transfer process, contact the registrar with whom you registered your domain name and follow its transfer process , which will include steps such as updating the name servers for your domain name to the ones associated with your hosted zone .As soon as your registrar propagates the new name server delegations, the DNS queries from your end users will start to get answered by the Route 53 DNS servers.

Question 6: What is Whois? Why is my information shown in Whois?

Answer:

Whois is a publicly available database for domain names that lists the contact information and the name servers that are associated with a domain name .Anyone can access the Whois database by using the WHOIS command, which is widely available. It's included in many operating systems, and it's also available as a web application on many websites. The

Internet Corporation for Assigned Names and Numbers (ICANN) requires that all domain names have publicly available contact information in case someone needs to get in contact with the domain name holder.

Question 7: What is DNSSEC?

Answer:

Domain Name System Security Extensions (DNSSEC) is a protocol for securing DNS traffic . If can protect your domain from DNS spoofing or a man-in-the-middle attacks .Attackers sometimes hijack traffic to internet endpoints such as web servers by intercepting DNS queries and returning their own IP addresses to DNS resolvers in place of the actual IP addresses for those endpoints. Users are then routed to the IP addresses provided by the attackers in the spoofed response, for example, to fake websites.

Question 8: What information do I need to provide to register a domain name?

Answer:

In order to register a domain name, you need to provide contact information for the registrant of the domain, including name , address , phone number , and email address .If the administrative and technical contacts are different, you need to provide that contact information, too.Question 9: How do I transfer a domain registration that has DNSSEC enabled to Amazon Route 53?

Answer:

When you configure DNSSEC for your domain, a DNS resolver establishes a chain of trust for responses from intermediate resolvers. The chain of trust begins with the TLD registry for the domain (your domain's parent zone) and ends with the authoritative name servers at your DNS service provider.

1) Use the method provided by your DNS service provider to sign the records in your hosted zone with the private key in an asymmetric key pair

2) Provide the public key from the key pair to your domain registrar , and specify the algorithm that was used to generate the key pair . The domain registrar forwards the public key and the algorithm to the registry for the top-level domain

(TLD).

See https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/domain-configure-dnssec.html

Question 10: What Top Level Domains ("TLDs") do you offer?

Answer:

Route 53 offers a wide selection of both generic Top Level Domains ("gTLDs": for example, .com and .net) and country-code Top Level Domains ("ccTLDs": for example, .de and .fr).

Question 11: Are there TLD's that are not able to be registered with Route 53?

Answer:

Yes, but you can still use Route 53 as the domain service.

Question 12: What happens when you register a public domain with Route 53?

Answer:

Route 53 automatically makes itself the DNS Service for the domain

by dong the following:

1) It creates a (public) hosted zone that has the same name as your domain.

2) It assigns a set of four (4) name servers to the hosted zone , unique to the account.

3) It gets the name servers from the hosted zone and adds them to the domain. This makes it the authoritative source for the domain names.

Question 13: Will I be charged for my name servers?

Answer:

You will be charged for the hosted zone that Route 53 creates for your domain name , as well as for the DNS queries against this hosted zone that Route 53 serves on your behalf . If you do not wish to be charged for Route 53's DNS service, you can delete your Route 53 hosted zone.