Exam Professional Cloud Network Engineer topic 1 question 236 discussion

Actual exam question from Google's Professional Cloud Network Engineer

Question #: 236
Topic #: 1

[All Professional Cloud Network Engineer Questions]

Your organization, TerramEarth, is launching a global application to manage credit card payments. There are some client VMs inside the same VPC as the application that need to access this application privately. Due to compliance requirements, the internal clients cannot use the global external IP address of the application. Currently, Cloud DNS only resolves myglobalapp.terramearth.com to the public IP address with a public zone. The clients will need to reach myglobalapp.example.com, without using its external IP address. You need to configure Cloud DNS to follow this requirement while following Google-recommended practices. What should you do?

A. Create a sub-domain named internal.terramearth.com. Add the new DNS entry (myglobalapp.internal.terramearth.com) to the sub-domain pointing to the internal IP address from the application VM.
B. Configure a query logic script inside Cloud DNS to check the source IP address from the VPC, and respond with a modified DNS record to include the internal IP address from the application VM.
C. Configure a private zone for the application record (myglobalapp.terramearth.com) and point to the internal IP address of the application VM. Bind this zone to the VPC.
D. Promote the ephemeral IP address from the application VM to static, add this static ip address to each internal client's host file, and change the myglobalapp.terramearth.com DNS record to this new static IP address.

Show Suggested Answer

Suggested Answer: C 🗳️

by 09bd94b at Feb. 21, 2025, 2:20 p.m.

Comments

Submit Cancel

n2183712847

1 month, 2 weeks ago

Selected Answer: C

It is C

upvoted 1 times

...

1f01b87

3 months ago

Selected Answer: C

C is correct

upvoted 2 times

...

09bd94b

3 months, 3 weeks ago

Selected Answer: C

Agree, C is correct

upvoted 1 times

...