Google Professional Cloud Network Engineer Question 551
Select 2Google Cloud PlatformYour organization has an on-premises DNS system that resolves internal domain names and a private Google Cloud DNS zone configured for cloud resources. You need to ensure that on-premises systems can resolve domain names of Google Cloud resources and that Google Cloud resources can resolve on-premises domain names. Which of the following approaches would meet these requirements?
- A
Set up a DNS forwarding server on-premises and configure a Cloud DNS inbound server policy to forward queries to the on-premises DNS.
- B
Use a Cloud VPN or Interconnect connection and configure DNS peering between on-premises DNS servers and Cloud DNS.
- C
Configure a Cloud DNS outbound server policy to forward queries to the on-premises DNS server.
- D
Use Google's public DNS servers to resolve both on-premises and Google Cloud domain names.
- E
Set up a split-horizon DNS system using Cloud DNS for internal Google Cloud resolution and on-premises DNS for local resolution.
Show answer and explanation
Correct answers: B, C
Explanation
To integrate on-premises DNS with Google Cloud, you need a secure network connection (e.g., Cloud VPN or Interconnect) and DNS configurations that allow bidirectional resolution. DNS peering enables Cloud DNS to resolve on-premises domain names, while an outbound server policy allows forwarding of queries to on-premises DNS servers. Public DNS servers and split-horizon setups do not meet the requirements for full integration.
- A. Incorrect.
Incorrect: While setting up a DNS forwarding server on-premises could work, it does not directly integrate with Cloud DNS or ensure bidirectional resolution.
- B. Correct.
Correct: Using a Cloud VPN or Interconnect ensures secure connectivity between on-premises and Google Cloud. DNS peering can then be used to allow resolution of domain names across environments.
- C. Correct.
Correct: Configuring a Cloud DNS outbound server policy allows queries for on-premises domain names to be forwarded to the on-premises DNS server, enabling resolution.
- D. Incorrect.
Incorrect: Google's public DNS servers are not suitable for resolving private domain names in hybrid environments.
- E. Incorrect.
Incorrect: A split-horizon DNS setup would segment DNS resolution rather than enabling full bidirectional integration between on-premises and Google Cloud.