Google Exam Professional Cloud Network Engineer Topic 9 Question 99 Discussion

Actual exam question for Google's Professional Cloud Network Engineer exam

Question #: 99
Topic #: 9

[All Professional Cloud Network Engineer Questions]

There are two established Partner Interconnect connections between your on-premises network and Google Cloud. The VPC that hosts the Partner Interconnect connections is named "vpc-a" and contains three VPC subnets across three regions, Compute Engine instances, and a GKE cluster. Your on-premises users would like to resolve records hosted in a Cloud DNS private zone following Google-recommended practices. You need to implement a solution that allows your on-premises users to resolve records that are hosted in Google Cloud. What should you do?

AAssociate the private zone to 'vpc-a.' Create an outbound forwarding policy and associate the policy to 'vpc-a.' Configure the on-premises DNS servers to forward queries for the private zone to the entry point addresses created when the policy was attached to 'vpc-a.'

BConfigure a DNS proxy service inside one of the GKE clusters. Expose the DNS proxy service in GKE as an internal load balancer. Configure the on-premises DNS servers to forward queries for the private zone to the IP address of the internal load balancer.

CUse custom route advertisements to announce 169.254.169.254 via BGP to the on-premises environment. Configure the on-premises DNS servers to forward DNS requests to 169.254.169.254.

DAssociate the private zone to 'vpc-a.' Create an inbound forwarding policy and associate the policy to 'vpc-a.' Configure the on-premises DNS servers to forward queries for the private zone to the entry point addresses created when the policy was attached to 'vpc-a.'

Show Suggested Answer

Suggested Answer: A

Associating the private zone to 'vpc-a' and creating an outbound forwarding policy allows DNS queries to be forwarded from on-premises to Google Cloud DNS. The on-premises DNS servers will forward queries to the entry points created when the forwarding policy was applied to 'vpc-a,' enabling proper name resolution.

by Rosalind at Dec 10, 2024, 04:58 AM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Network Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Veronika

2 months ago

I think option A is the best choice as it follows Google-recommended practices for resolving records hosted in Cloud DNS private zones.

upvoted 0 times

...

Gilma

2 months ago

Alternatively, we could use custom route advertisements to announce 169.254.169.254 via BGP to the on-premises environment.

upvoted 0 times

...

Raelene

2 months ago

Option D looks a bit sketchy to me. Inbound forwarding policies don't sound like they'd work well for this use case.

upvoted 0 times

...

3 months ago

Option A seems like the way to go. Forwarding the queries through an outbound policy is a clean and straightforward solution.

upvoted 0 times

Tequila

2 months ago

User 4: Yeah, configuring the on-premises DNS servers to forward queries to the entry point addresses created with the policy attached to 'vpc-a' makes sense.

upvoted 0 times

...