Google Professional Cloud Network Engineer Question 549
Select 2Google Cloud PlatformYour organization is setting up a hybrid cloud environment. You need to ensure that DNS queries for on-premises domains (e.g., 'corp.example.com') are forwarded to the on-premises DNS servers, while all other DNS queries should use Google Cloud's Cloud DNS service. How should you configure DNS forwarding and DNS server policies to meet this requirement?
- A
Create a Cloud DNS server policy with a forwarding rule for 'corp.example.com' and specify the on-premises DNS server's IP address.
- B
Create a Cloud DNS server policy with a forwarding rule for all domains (wildcard '*') and specify the on-premises DNS server's IP address.
- C
Attach the Cloud DNS server policy to all relevant VPC networks that need to resolve 'corp.example.com'.
- D
Create a private DNS zone for 'corp.example.com' in Cloud DNS and populate it with on-premises DNS records.
- E
Create a Cloud DNS server policy with a conditional forwarding rule for 'corp.example.com' to the on-premises DNS servers and a default forwarding rule (wildcard '*') to use Google Public DNS.
Show answer and explanation
Correct answers: A, C
Explanation
To ensure proper DNS resolution in a hybrid environment, you need to configure a Cloud DNS server policy with a forwarding rule specific to the on-premises domain ('corp.example.com') pointing to the on-premises DNS servers. This avoids sending unnecessary queries to on-premises servers for non-relevant domains. Attaching the policy to the relevant VPC networks ensures the forwarding rule is applied to the appropriate instances.
- A. Correct.
Correct: This ensures that DNS queries for 'corp.example.com' are forwarded to the specified on-premises DNS servers, meeting the requirement for hybrid DNS resolution.
- B. Incorrect.
Incorrect: Forwarding all domains (wildcard '*') to on-premises DNS servers would result in unnecessary latency and potential resolution failures for public domains.
- C. Correct.
Correct: Attaching the DNS server policy to the relevant VPC networks ensures that the policy applies to instances in those networks.
- D. Incorrect.
Incorrect: While a private DNS zone could store DNS records for 'corp.example.com', it would require manual updates and would not utilize the on-premises DNS servers for dynamic or authoritative resolution.
- E. Incorrect.
Incorrect: Conditional forwarding for 'corp.example.com' is correct, but the default forwarding rule to Google Public DNS is unnecessary since Google Cloud defaults to its own DNS resolver for public queries.