Google Professional Cloud Network Engineer exam dumps

Google Professional Cloud Network Engineer practice question 566 of 790

Professional Cloud Network Engineer. Professional level, Google Cloud. Free question with the correct answer and a full explanation.

Google Professional Cloud Network Engineer Question 566

Select 3Google Cloud Platform

You are configuring Cloud DNS for a GKE cluster that uses the external-DNS operator to manage DNS records dynamically. The cluster is hosting an application that requires DNS records to be created in a custom DNS zone. What steps must you take to ensure that the external-DNS operator can create DNS records in the custom DNS zone?

  1. A

    Grant the GKE cluster's service account the 'roles/dns.admin' IAM role.

  2. B

    Create a custom DNS zone in Cloud DNS and configure external-DNS with the zone name.

  3. C

    Enable the Cloud DNS API in the Google Cloud project hosting the GKE cluster.

  4. D

    Update the GKE cluster's node pool to use nodes with public IP addresses for DNS resolution.

  5. E

    Configure external-DNS with the credentials of a service account that has permissions for the custom DNS zone.

Show answer and explanation

Correct answers: B, C, E

Explanation

To configure Cloud DNS and the external-DNS operator for GKE, you need to ensure that external-DNS is aware of the custom DNS zone, has API access to Cloud DNS, and can authenticate using a service account with the appropriate permissions. These steps ensure external-DNS can dynamically create and manage DNS records within the custom DNS zone while adhering to security best practices.

  • A. Incorrect.

    Incorrect. Granting the GKE cluster's service account the 'roles/dns.admin' IAM role provides too broad a level of access. It is better to follow the principle of least privilege and grant specific permissions to a dedicated service account.

  • B. Correct.

    Correct. You need to create a custom DNS zone in Cloud DNS and configure external-DNS with the zone name so it knows where to create and manage records.

  • C. Correct.

    Correct. The Cloud DNS API must be enabled in the Google Cloud project for any DNS operations to be performed.

  • D. Incorrect.

    Incorrect. Updating the node pool to use public IP addresses is unrelated to the functionality of external-DNS. DNS resolution works without requiring public IPs on the nodes.

  • E. Correct.

    Correct. External-DNS requires a service account with appropriate permissions to manage DNS records in the custom zone. You must configure external-DNS with the credentials for this service account.

Timed practice exam

Take a Google Professional Cloud Network Engineer practice test under exam conditions

60 questions in 120 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam

More Google Professional Cloud Network Engineer practice questions

  1. 567.You are managing a GKE cluster for a production application that requires dynamic DNS record...
  2. 568.You are managing a Google Kubernetes Engine (GKE) cluster that hosts multiple applications. You...
  3. 569.You are managing a GKE cluster in Google Cloud and need to set up automatic DNS record management...
  4. 570.Your company hosts a web application in Google Cloud that requires internet access to fetch updates...
  5. 571.Your organization uses a Google Cloud Virtual Private Cloud (VPC) and requires internet egress...
Back to the Google Professional Cloud Network Engineer exam dumps