Google Professional Cloud Network Engineer Question 529
Select 3Google Cloud PlatformYour organization has implemented a web application hosted in multiple regions on Google Cloud. You use a global load balancer to distribute traffic across these regions. To ensure low-latency access for users worldwide, you decide to configure a Cloud DNS zone for your application. Which of the following steps are necessary to properly configure and maintain Cloud DNS for this use case?
- A
Create a public DNS zone and add an A record pointing to the global load balancer's IP address.
- B
Configure DNS policies to restrict access to the DNS records based on user IPs.
- C
Set up DNSSEC to secure your DNS zone against potential spoofing and cache poisoning attacks.
- D
Create a private DNS zone to resolve internal queries for the application.
- E
Regularly monitor and update DNS TTL values to optimize caching and reduce propagation delays.
Show answer and explanation
Correct answers: A, C, E
Explanation
To configure and maintain Cloud DNS for a public-facing application, you need to create a public DNS zone with appropriate records pointing to the global load balancer's IP address. DNSSEC should be enabled to ensure security against attacks. Monitoring and optimizing TTL values is crucial for performance and reducing propagation delays. Private DNS zones and DNS policies are not relevant for this scenario since the application is public-facing.
- A. Correct.
Correct: Creating a public DNS zone and adding an A record pointing to the global load balancer's IP address is essential for making the application accessible to users worldwide.
- B. Incorrect.
Incorrect: DNS policies are not required for this use case because they are typically used to enforce access control for private DNS zones, not public zones.
- C. Correct.
Correct: Enabling DNSSEC ensures the integrity and authenticity of DNS responses, protecting against spoofing and cache poisoning, which is critical for a public-facing application.
- D. Incorrect.
Incorrect: A private DNS zone is used for internal name resolution and is not applicable in this scenario where the application is public-facing.
- E. Correct.
Correct: Regularly monitoring and updating TTL values helps optimize performance by controlling how long DNS records are cached, which can impact latency and propagation times.