Google Professional Cloud Network Engineer Question 525
Select 2Google Cloud PlatformYour organization uses Google Cloud DNS to manage the DNS records for its website. The website must remain highly available and responsive to users worldwide. You are tasked with configuring a DNS solution that ensures traffic is directed to the closest regional backend servers based on user location. Which configuration steps should you perform?
- A
Create a public DNS zone and configure A records for each regional backend server.
- B
Enable DNSSEC for the DNS zone to add an additional layer of security.
- C
Set up a Global Load Balancer with a backend service for each region and configure Cloud DNS with geo-location-based routing policies.
- D
Configure a private DNS zone and use private IPs for all regional backend servers.
- E
Configure failover policies in Cloud DNS to redirect traffic if one regional backend server becomes unavailable.
Show answer and explanation
Correct answers: A, C
Explanation
To ensure high availability and responsiveness for a global audience, you need to use a public DNS zone with A records for each regional backend server. Additionally, configuring geo-location-based routing through Cloud DNS and a Global Load Balancer ensures that traffic is directed to the closest regional backend server based on the user's location. DNSSEC and failover policies, while useful in other contexts, are not pertinent to the specific requirement of geo-location-based traffic management.
- A. Correct.
This step is necessary to define the DNS records for each regional server so that Cloud DNS can resolve domain names to the appropriate IP addresses.
- B. Incorrect.
While enabling DNSSEC improves security, it does not contribute to directing traffic based on user location. This step is not relevant to the scenario.
- C. Correct.
Setting up a Global Load Balancer and using geo-location-based routing is essential to ensure users are directed to the closest regional backend servers.
- D. Incorrect.
A private DNS zone is used for internal DNS resolution within a VPC. Since the website must serve users worldwide, a public DNS zone is required, not a private one.
- E. Incorrect.
Failover policies in Cloud DNS are used to handle primary and secondary endpoints, not for routing traffic based on user location. Geo-location-based routing is the correct solution for this scenario.