Google Professional Cloud Network Engineer Question 564
Select 3Google Cloud PlatformYou are setting up DNS peering between two Virtual Private Clouds (VPCs) in Google Cloud: VPC-A and VPC-B. VPC-A hosts a private DNS zone for the domain 'example.internal'. You want VPC-B to resolve domain names in 'example.internal' using VPC-A’s private DNS zone. What steps must you take to establish DNS peering between the two VPCs?
- A
Create a DNS peering zone in VPC-B pointing to VPC-A.
- B
Create a DNS peering zone in VPC-A pointing to VPC-B.
- C
Grant the
roles/dns.adminIAM role to the service account for both VPCs. - D
Enable DNS peering in the private DNS zone settings in VPC-A and allow VPC-B.
- E
Ensure that VPC network peering is established between VPC-A and VPC-B.
Show answer and explanation
Correct answers: A, D, E
Explanation
To set up DNS peering, you need to establish VPC network peering between the two VPCs, enable DNS peering in the private DNS zone settings of the host VPC (VPC-A), and create a DNS peering zone in the querying VPC (VPC-B). These steps ensure that VPC-B can resolve DNS queries using VPC-A’s private DNS zone.
- A. Correct.
Correct. A DNS peering zone must be created in VPC-B to forward DNS queries to VPC-A’s private DNS zone.
- B. Incorrect.
Incorrect. A DNS peering zone needs to be created in the VPC that will query the private zone, not the VPC hosting it.
- C. Incorrect.
Incorrect. While IAM roles may be required for managing DNS configurations, granting
roles/dns.adminis not a necessary step for setting up DNS peering. - D. Correct.
Correct. DNS peering must be explicitly enabled in the private DNS zone settings in VPC-A to allow VPC-B to query it.
- E. Correct.
Correct. VPC network peering is required between VPC-A and VPC-B to enable communication between the networks for DNS queries.