Google Professional Cloud Network Engineer Question 546
Single answerGoogle Cloud PlatformYour organization has a hybrid cloud setup with on-premises data centers and resources deployed in Google Cloud. The on-premises environment uses an internal DNS server for resolving custom domain names, while Google Cloud resources are expected to resolve both custom on-premises domain names and public domain names. You want to configure DNS forwarding to ensure that Google Cloud instances can resolve the on-premises custom domain names. How should you configure this setup?
- A
Create a Private DNS zone in Google Cloud and manually add the on-premises custom domain records to it.
- B
Configure a Cloud DNS forwarding zone and specify the on-premises DNS server as the target forwarding address.
- C
Set up a DNS peering policy between the Google Cloud VPC and the on-premises environment.
- D
Use Google's public DNS servers (8.8.8.8 and 8.8.4.4) to resolve on-premises custom domain names.
Show answer and explanation
Correct answer: B
Explanation
To enable Google Cloud resources to resolve on-premises custom domain names, you need to configure a Cloud DNS forwarding zone. This type of zone forwards queries for specific domains to an external DNS server, such as the on-premises internal DNS server. Other options like setting up a Private DNS zone or using public DNS servers are not suitable for resolving private, custom domain names in a hybrid environment.
- A. Incorrect.
This option is incorrect because a Private DNS zone is only useful for managing DNS records within Google Cloud, not for forwarding queries to an on-premises DNS server.
- B. Correct.
This is the correct answer because a Cloud DNS forwarding zone allows you to forward DNS queries for specific domains (e.g., on-premises custom domains) to an external DNS server, such as your on-premises DNS server.
- C. Incorrect.
This option is incorrect because DNS peering is used to share DNS records between different Google Cloud VPCs, not for forwarding queries to an on-premises environment.
- D. Incorrect.
This option is incorrect because public DNS servers like 8.8.8.8 cannot resolve custom on-premises domain names that are not publicly accessible.