A hybrid environment uses Direct Connect between the on-premises datacenter and AWS. On-prem resources use corp.example.com and VPC resources use a Route 53 private hosted zone aws.example.com. An open-source recursive resolver in a VPC forwards corp.example.com to the on-prem DNS resolver, and the on-prem resolver forwards aws.example.com to the VPC resolver. The company will replace the recursive resolver with Route 53 Resolver endpoints. Which steps should a network engineer perform? (Choose three.)

To replace the open-source resolver, you need to establish Route 53 Resolver endpoints. An inbound endpoint allows on-premises DNS servers to query AWS private hosted zones, and an outbound endpoint allows VPC resources to query on-premises DNS servers. Therefore, creating both an inbound and an outbound endpoint is necessary. To resolve aws.example.com from on-premises, the on-premises DNS resolver must be configured to forward these queries to the IP addresses of the Route 53 Resolver inbound endpoint. To resolve corp.example.com from the VPC, a Route 53 Resolver rule is needed to forward these queries to the IP address of the on-premises DNS resolver via the outbound endpoint. Incorrect options: Forwarding aws.example.com queries to an outbound endpoint is incorrect; outbound endpoints are for VPC to on-premises queries. Creating a rule to forward aws.example.com to an inbound endpoint is incorrect; inbound endpoints receive queries, they don't resolve them for the VPC.