Exam Professional Cloud Network Engineer topic 1 question 22 discussion

Actual exam question from Google's Professional Cloud Network Engineer

Question #: 22
Topic #: 1

[All Professional Cloud Network Engineer Questions]

You are disabling DNSSEC for one of your Cloud DNS-managed zones. You removed the DS records from your zone file, waited for them to expire from the cache, and disabled DNSSEC for the zone. You receive reports that DNSSEC validating resolves are unable to resolve names in your zone.
What should you do?

A. Update the TTL for the zone.
B. Set the zone to the TRANSFER state.
C. Disable DNSSEC at your domain registrar.
D. Transfer ownership of the domain to a new registrar.

Show Suggested Answer

Suggested Answer: C 🗳️

by saurabh1805 at Aug. 24, 2020, 5:51 p.m.

Comments

Submit Cancel

saurabh1805

Highly Voted 4 years, 3 months ago

C is correct answer here.

upvoted 9 times

HateMicrosoft

4 years, 3 months ago

Deactivating DNSSEC at your Domain Registrar https://cloud.google.com/dns/docs/registrars#del-ds

upvoted 7 times

...

saurabh1805

4 years, 3 months ago

refer below link for more details https://cloud.google.com/dns/docs/registrars#del-ds

upvoted 2 times

...

saraali

Most Recent 4 months ago

Selected Answer: C

To completely disable DNSSEC, removing DS records from your Cloud DNS-managed zone is the right step. However, DNSSEC validation is also controlled at your domain registrar. If DNSSEC is still enabled at the registrar, DNS resolvers may continue to expect DNSSEC validation, causing resolution issues. Thus, you need to disable DNSSEC at your domain registrar to fully stop DNSSEC validation. So, the correct action is C. Disable DNSSEC at your domain registrar.

upvoted 1 times

...

xhilmi

1 year ago

Selected Answer: C

Choose C. Explanation: DS Records Removal: Removing DS records from your zone is the correct step to disable DNSSEC for a Cloud DNS-managed zone. This action signals that DNSSEC should no longer be enforced for the domain. Propagation Time: DNS changes can take some time to propagate throughout the DNS infrastructure, and cached DS records may still be causing validation issues for some validating resolvers. Registrar Configuration: Disabling DNSSEC at your domain registrar is a crucial step. The registrar is the authoritative source for your domain's DNSSEC status, and disabling DNSSEC there ensures that authoritative DNS servers no longer include DNSSEC-related information for your domain.

upvoted 1 times

...

pk349

1 year, 11 months ago

C: Disable DNSSEC for managed zones Important: Before disabling DNSSEC for a managed zone that you want to use, you must deactivate DNSSEC at your domain *** registrar to ensure that DNSSEC-validating resolvers can still resolve names in the zone.

upvoted 1 times

...

AzureDP900

2 years ago

C. Disable DNSSEC at your domain registrar.

upvoted 1 times

...

AzureDP900

2 years, 1 month ago

C Before you disable DNSSEC for a managed zone that you still want to use, you must deactivate DNSSEC for your zone at your domain registrar to ensure that DNSSEC-validating resolvers can still resolve names in the zone.

upvoted 1 times

...