Ultimate access to all questions.
A company hosts an internal website behind an Application Load Balancer (ALB) within a VPC that uses the CIDR block 172.31.0.0/16. They configure a private hosted zone for the domain example.com in Amazon Route 53 and establish an AWS Site-to-Site VPN connection between their office network and the VPC.
A network engineer must implement a DNS solution to enable employees to access the internal website via a private domain URL (https://example.com) from the office network.
Which two steps should be taken to fulfill this requirement?