Google Professional Cloud Network Engineer Question 561
Select 2Google Cloud PlatformYou are managing the network infrastructure for a company with multiple Google Cloud projects. Project A hosts an internal DNS zone 'internal-zone.example.com', and Project B needs to resolve hostnames from this DNS zone. Both projects are in the same organization and use Shared VPC. How can you enable Project B to resolve DNS queries for 'internal-zone.example.com'?
- A
Set up DNS peering between Project A and Project B for 'internal-zone.example.com'.
- B
Enable Private Google Access in Project B.
- C
Create a DNS Peering Zone in Project B and configure it to point to the DNS zone in Project A.
- D
Ensure that the Shared VPC host project has Cloud DNS enabled.
- E
Configure a forwarding rule in Project B to forward DNS queries to Project A's Cloud DNS IP.
Show answer and explanation
Correct answers: A, C
Explanation
To enable DNS resolution between two Google Cloud projects, you need to set up DNS peering. This involves creating a DNS Peering Zone in the requesting project (Project B) and configuring it to point to the internal DNS zone in the providing project (Project A). This approach allows DNS queries from Project B to resolve hostnames in the internal DNS zone 'internal-zone.example.com' hosted in Project A.
- A. Correct.
Correct: DNS peering allows you to share DNS resolution between projects, enabling Project B to resolve hostnames from the internal DNS zone in Project A.
- B. Incorrect.
Incorrect: Private Google Access is used for accessing Google APIs and services over private IPs, but it does not facilitate DNS resolution between projects.
- C. Correct.
Correct: Creating a DNS Peering Zone in Project B and pointing it to the DNS zone in Project A is a necessary step for enabling DNS resolution across projects.
- D. Incorrect.
Incorrect: While Cloud DNS must be enabled for the Shared VPC host project, this is not sufficient to resolve hostnames across projects. DNS peering must be explicitly configured.
- E. Incorrect.
Incorrect: DNS forwarding rules are not supported between projects in Google Cloud. DNS peering is the correct approach.