Google Professional Cloud Network Engineer Question 552
Single answerGoogle Cloud PlatformYour organization hosts several internal services using private DNS zones on-premises. You want Google Cloud resources in a Virtual Private Cloud (VPC) to resolve these on-premises domain names. The solution should ensure low latency and high availability for DNS queries. Which setup should you choose?
- A
Configure a Cloud DNS forwarding zone that forwards queries to your on-premises DNS servers.
- B
Set up a Cloud DNS private zone and manually replicate your on-premises DNS records to this zone.
- C
Use Cloud Interconnect or VPN to connect your on-premises DNS servers and configure a DNS peering zone in Cloud DNS.
- D
Enable the default Google Cloud DNS resolver to automatically query your on-premises DNS servers.
Show answer and explanation
Correct answer: A
Explanation
To integrate on-premises DNS with Google Cloud, a Cloud DNS forwarding zone is the most appropriate solution. It allows you to forward specific DNS queries from your VPC to on-premises DNS servers over a secure and performant connection like Cloud Interconnect or VPN. This approach ensures low latency and high availability for DNS resolution, meeting the organization's requirements.
- A. Correct.
Correct: A Cloud DNS forwarding zone is designed to forward DNS queries to custom DNS servers, such as your on-premises DNS servers. This supports low latency and high availability when used with a reliable connection like VPN or Cloud Interconnect.
- B. Incorrect.
Incorrect: Manually replicating DNS records to a Cloud DNS private zone is not scalable or efficient for dynamic DNS environments, and it does not support low latency or high availability for DNS queries.
- C. Incorrect.
Incorrect: DNS peering zones are designed for peering between two VPCs, not for integrating on-premises DNS. This option is not relevant to the scenario.
- D. Incorrect.
Incorrect: The default Google Cloud DNS resolver does not natively support querying custom on-premises DNS servers, so this option would not meet the requirements.