Exam Professional Cloud Network Engineer topic 1 question 140 discussion

Actual exam question from Google's Professional Cloud Network Engineer

Question #: 140
Topic #: 1

[All Professional Cloud Network Engineer Questions]

Your organization uses a Shared VPC architecture with a host project and three service projects. You have Compute Engine instances that reside in the service projects. You have critical workloads in your on-premises data center. You need to ensure that the Google Cloud instances can resolve on-premises hostnames via the Dedicated Interconnect you deployed to establish hybrid connectivity. What should you do?

A. 1. Create a Cloud DNS private forwarding zone in the host project of the Shared VPC that forwards the private zone to the on-premises DNS servers.
2. In your Cloud Router, add a custom route advertisement for the IP 35.199.192.0/19 to the on-premises environment.
B. 1. Create a Cloud DNS private forwarding zone in the host project of the Shared VPC that forwards the Private zone to the on-premises DNS servers.
2. In your Cloud Router, add a custom route advertisement for the IP 169.254 169.254 to the on-premises environment.
C. 1. Configure a Cloud DNS private zone in the host project of the Shared VPC.
2. Set up DNS forwarding to your Google Cloud private zone on your on-premises DNS servers to point to the inbound forwarder IP address in your host project
3. In your Cloud Router, add a custom route advertisement for the IP 169.254 169 254 to the on-premises environment.
D. 1.Configure a Cloud DNS private zone in the host project of the Shared VPC.
2. Set up DNS forwarding to your Google Cloud private zone on your on-premises DNS servers to point to the inbound forwarder IP address in your host project.
3. Configure a DNS policy in the Shared VPC to allow inbound query forwarding with your on-premises DNS server as the alternative DNS server.

Show Suggested Answer

Suggested Answer: A 🗳️

by playpacman at Dec. 1, 2022, 11:03 a.m.

Comments

Submit Cancel

saraali

5 months, 2 weeks ago

Selected Answer: A

Option A is indeed correct because it creates a Cloud DNS private forwarding zone in the host project of the Shared VPC. This forwarding zone allows DNS queries to be directed to on-premises DNS servers for resolution. By advertising the route for 35.199.192.0/19 through the Cloud Router, Google Cloud can ensure that the DNS queries are properly routed to the on-premises environment. This setup ensures DNS resolution between Google Cloud VMs and on-premises systems through the Dedicated Interconnect, fulfilling the hybrid connectivity requirement.

upvoted 1 times

...

ZODOGAM

7 months ago

Selected Answer: D

Google recommends configuring Cloud DNS private zones with DNS policies for hybrid environments, as this approach provides: Centralized DNS management. A secure and efficient way to resolve on-premises hostnames. No dependency on unrelated route advertisements.

upvoted 1 times

...

shayanahmed

11 months, 2 weeks ago

Answer should be a combination of A and D as both contains valid steps from the linkhttps://cloud.google.com/dns/docs/best-practices#reference_architectures_for_hybrid_dns. I will go with majority

upvoted 1 times

...