AWS Certified Advanced Networking - Specialty (#36)

Your company maintains an Amazon Route 53 private hosted zone. DNS resolution is restricted to a single, pre-existing VPC. For a new application deployment, you create an additional VPC in the same AWS account. Both this new VPC and your on-premises DNS infrastructure must resolve records in the existing private hosted zone. Which two activities are required to enable DNS resolution both within the new VPC and from the on-premises infrastructure? (Select two.)

Update the DHCP options set for the new VPC with the Route 53 nameserver IP addresses.
Update the Route 53 private hosted zone’s VPC associations to include the new VPC.
Launch Amazon EC2-based DNS proxies in the new VPC. Specify the proxies as forwarders in the on-premises DNS.
Update the on-premises DNS to include forwarders to the Route 53 nameserver IP addresses.
Launch Amazon EC2-based DNS proxies in the new VPC. Specify the proxies in the DHCP options set.