Google Professional Cloud Network Engineer Question 531
Select 3Google Cloud PlatformYour company has deployed a web application hosted on multiple Compute Engine instances behind a global external HTTP(S) load balancer in Google Cloud. You need to configure a Cloud DNS zone that will resolve the domain name www.example.com to the IP address of the load balancer. Additionally, you want to ensure that the DNS setup is resilient and follows best practices. Which of the following steps should you perform?
- A
Create a public Cloud DNS zone for the domain
example.com. - B
Add an A record in the Cloud DNS zone pointing
www.example.comto the external IP address of the load balancer. - C
Add a CNAME record in the Cloud DNS zone pointing
www.example.comto the external IP address of the load balancer. - D
Enable DNSSEC for the Cloud DNS zone to improve security.
- E
Create a private Cloud DNS zone for the domain
example.com.
Show answer and explanation
Correct answers: A, B, D
Explanation
To configure a resilient and secure DNS setup for www.example.com, you need to create a public Cloud DNS zone, which is appropriate for public domains. An A record should be added to map the domain to the external IP address of the load balancer. Enabling DNSSEC is a recommended best practice to safeguard DNS responses. A private Cloud DNS zone is not applicable for this scenario, and a CNAME record cannot directly point to an IP address.
- A. Correct.
Correct: A public Cloud DNS zone is required to manage DNS records for a public domain like
example.com. This allows external users to resolve the domain name. - B. Correct.
Correct: An A record is needed to map the domain name
www.example.comto the external IP address of the load balancer, ensuring that users can access the application. - C. Incorrect.
Incorrect: A CNAME record cannot point directly to an IP address. Instead, it points to another domain name. In this scenario, an A record is the correct choice.
- D. Correct.
Correct: Enabling DNSSEC helps secure the DNS records from spoofing and ensures that DNS responses are authentic, which is a best practice for public zones.
- E. Incorrect.
Incorrect: A private Cloud DNS zone is used to manage internal DNS records for services within a VPC. It is not suitable for public domains like
example.com.