Google Professional Cloud Network Engineer Question 555
Single answerGoogle Cloud PlatformYour organization has deployed a hybrid environment with services hosted both on Google Cloud and on-premises. You need to set up a DNS solution to ensure that internal users accessing services from the company’s internal network resolve internal IP addresses, while external users accessing services from the internet resolve public IP addresses. How should you configure the DNS to meet this requirement?
- A
Use a single public DNS zone with all records pointing to the public IP addresses of the services.
- B
Set up a split-horizon DNS configuration with separate internal and external DNS zones.
- C
Use Google Cloud’s Cloud DNS with a private zone only for all DNS queries.
- D
Configure a public DNS zone for external users and rely on a NAT gateway for internal users to access services.
Show answer and explanation
Correct answer: B
Explanation
Split-horizon DNS is the best solution for a hybrid setup where internal and external users need different DNS resolutions. By maintaining separate internal and external DNS zones, you can ensure that internal users resolve private/internal IPs and external users resolve public IPs. This approach is a standard best practice to handle DNS in hybrid environments.
- A. Incorrect.
This option doesn’t segregate internal and external traffic. Internal users would also resolve public IP addresses, which is not optimal for the hybrid setup.
- B. Correct.
This is the correct approach. A split-horizon DNS setup allows you to use separate DNS zones for internal and external users, ensuring that internal users resolve internal IPs and external users resolve public IPs.
- C. Incorrect.
Using only a private zone in Cloud DNS will not serve external users, as private zones are only accessible within the VPC or authorized networks.
- D. Incorrect.
A public DNS zone alone cannot differentiate between internal and external users, and relying on a NAT gateway doesn’t address the DNS resolution issue.