Google Professional Cloud Network Engineer Question 548
Single answerGoogle Cloud PlatformYour organization has deployed a hybrid cloud architecture. On-premises workloads need to resolve specific internal domain names hosted within the on-premises DNS servers. You configure DNS forwarding on Google Cloud to forward queries for these internal domains to the on-premises DNS servers. However, after implementing the configuration, the resolution is failing for those domains. What is the most likely reason for this issue?
- A
The DNS forwarding zone is not associated with the correct VPC network.
- B
Cloud DNS does not support forwarding queries to on-premises DNS servers.
- C
The on-premises DNS servers are not reachable over the configured VPC network.
- D
You did not specify the internal domain names to forward in the DNS policy.
Show answer and explanation
Correct answer: C
Explanation
When configuring DNS forwarding in a hybrid cloud setup, it is critical to ensure that the on-premises DNS servers are reachable from the Google Cloud VPC network. Common causes of reachability issues include incorrect firewall rules, missing routes, or network peering misconfigurations. In this scenario, the most likely cause of the resolution failure is that the on-premises DNS servers are not reachable over the configured VPC network.
- A. Incorrect.
If the DNS forwarding zone is not associated with the correct VPC network, the queries would not reach the forwarding zone. However, this would not cause resolution to fail outright if the configuration is otherwise correct.
- B. Incorrect.
Cloud DNS does support forwarding queries to on-premises DNS servers when DNS forwarding zones and policies are properly configured.
- C. Correct.
If the on-premises DNS servers are not reachable over the configured VPC network, queries will fail because the forwarding zone cannot communicate with the on-premises infrastructure.
- D. Incorrect.
While specifying internal domain names in the DNS policy is necessary, this is not the direct issue as the problem lies with the reachability of the on-premises DNS servers.