Google Professional Cloud Network Engineer Question 547
Single answerGoogle Cloud PlatformYou are designing a hybrid cloud architecture where your on-premises environment needs to resolve internal DNS names hosted in Google Cloud. You have deployed a Cloud DNS private zone for your internal names and need to ensure the on-premises environment can resolve these names. How should you configure DNS resolution in this scenario?
- A
Configure DNS forwarding on the on-premises DNS servers to forward queries for the private zone to a Cloud DNS inbound server policy.
- B
Set up a Cloud VPN or Interconnect between on-premises and Google Cloud, and configure the on-premises DNS servers to forward queries to the Cloud DNS public IP addresses.
- C
Deploy a DNS resolver in Google Cloud that forwards queries to the private zone and configure the on-premises DNS servers to forward queries to this resolver.
- D
Enable DNS peering between the on-premises DNS servers and the private zone in Cloud DNS.
Show answer and explanation
Correct answer: A
Explanation
To enable on-premises DNS servers to resolve private DNS names in Google Cloud, you must configure DNS forwarding to a Cloud DNS inbound server policy. This allows DNS queries from on-premises environments to be resolved by the Cloud DNS private zone without requiring additional custom solutions or introducing unnecessary complexity.
- A. Correct.
This is correct because DNS forwarding to a Cloud DNS inbound server policy is the recommended approach for hybrid DNS resolution. An inbound policy allows Google Cloud to accept DNS queries from on-premises environments.
- B. Incorrect.
This is incorrect because the Cloud DNS public IP addresses only resolve public DNS records, not private zones. Private zones require specific configuration to handle queries from on-premises environments.
- C. Incorrect.
This is partially feasible but not the best solution. While deploying a custom DNS resolver in Google Cloud could work, it introduces additional complexity and management overhead. Using a Cloud DNS inbound server policy is simpler and more reliable.
- D. Incorrect.
This is incorrect because DNS peering is not a feature that exists between on-premises DNS servers and Cloud DNS. DNS peering in Google Cloud is used for specific VPC-to-VPC scenarios.