Google Professional Cloud Network Engineer Question 545
Select 3Google Cloud PlatformYour organization has deployed multiple GKE clusters in a single Google Cloud project. To ensure consistent DNS resolution across these clusters and allow access to an on-premises private DNS zone, you are tasked with configuring DNS forwarding in your environment. Which steps must you take to achieve this?
- A
Create a Cloud DNS forwarding zone and configure its forwarding targets to point to the on-premises DNS server.
- B
Create a DNS server policy to apply to the VPC network that the GKE clusters are using.
- C
Deploy a managed DNS resolver in each GKE cluster to forward DNS queries to the on-premises DNS server.
- D
Explicitly configure the DNS forwarding rules in each GKE cluster’s kube-dns configuration.
- E
Associate the DNS server policy with the correct VPC network.
Show answer and explanation
Correct answers: A, B, E
Explanation
To enable DNS forwarding for a GKE cluster to resolve on-premises private DNS zones, you must configure Cloud DNS forwarding at the network level. This involves creating a Cloud DNS forwarding zone to define the forwarding rules, creating a DNS server policy to specify the behavior, and associating the policy with the appropriate VPC network. These steps ensure consistent DNS resolution across the clusters without requiring manual changes to each cluster's configuration.
- A. Correct.
Correct. A Cloud DNS forwarding zone is required to forward DNS queries to the on-premises DNS server.
- B. Correct.
Correct. A DNS server policy must be created to define the DNS forwarding behavior for the associated VPC network.
- C. Incorrect.
Incorrect. A managed DNS resolver is not required because Cloud DNS forwarding handles the communication with the on-premises DNS server.
- D. Incorrect.
Incorrect. Modifying GKE kube-dns is unnecessary, as DNS forwarding can be configured at the VPC network level using Cloud DNS.
- E. Correct.
Correct. Associating the DNS server policy with the correct VPC network ensures that the DNS forwarding rules are applied to resources within that network.