Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Google Professional Cloud Network Engineer Exam - Topic 7 Question 66 Discussion

You are designing a hybrid cloud environment for your organization. Your Google Cloud environment is interconnected with your on-premises network using Cloud HA VPN and Cloud Router. The Cloud Router is configured with the default settings. Your on-premises DNS server is located at 192.168.20.88 and is protected by a firewall, and your Compute Engine resources are located at 10.204.0.0/24. Your Compute Engine resources need to resolve on-premises private hostnames using the domain corp.altostrat.com while still resolving Google Cloud hostnames. You want to follow Google-recommended practices. What should you do?
D) Create a private zone in Cloud DNS for 'corp altostrat.com' called corp-altostrat-com. Configure DNS Server Policies and create a policy with Alternate DNS servers to 192.168.20.88. Configure your on-premises firewall to accept traffic from 35.199.192.0/19. Set a custom route advertisement on the Cloud Router for 35.199.192.0/19.
A) Create a private forwarding zone in Cloud DNS for 'corp.altostrat.com' called corp-altostrat-com that points to 192.168.20.88. Configure your on-premises firewall to accept traffic from 10.204.0.0/24. Set a custom route advertisement on the Cloud Router for 10.204.0.0/24
B) Create a private forwarding zone in Cloud DNS for 'corp.altostrat.com' called corp-altostrat-com that points to 192.168 20.88. Configure your on-premises firewall to accept traffic from 35.199.192.0/19 Set a custom route advertisement on the Cloud Router for 35.199.192.0/19.
C) Create a private forwarding zone in Cloud DNS for 'corp .altostrat.com' called corp-altostrat-com that points to 192.168.20.88. Configure your on-premises firewall to accept traffic from 10.204.0.0/24. Modify the /etc/resolv conf file on your Compute Engine instances to point to 192.168.20 88

Google Professional Cloud Network Engineer Exam - Topic 7 Question 66 Discussion

Actual exam question for Google's Professional Cloud Network Engineer exam
Question #: 66
Topic #: 7
[All Professional Cloud Network Engineer Questions]

You are designing a hybrid cloud environment for your organization. Your Google Cloud environment is interconnected with your on-premises network using Cloud HA VPN and Cloud Router. The Cloud Router is configured with the default settings. Your on-premises DNS server is located at 192.168.20.88 and is protected by a firewall, and your Compute Engine resources are located at 10.204.0.0/24. Your Compute Engine resources need to resolve on-premises private hostnames using the domain corp.altostrat.com while still resolving Google Cloud hostnames. You want to follow Google-recommended practices. What should you do?

Show Suggested Answer Hide Answer
Suggested Answer: D

by Lisha at Mar 21, 2023, 05:14 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Network Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Lynette
9 months ago
Wait, why would we need to change the resolv.conf file? That seems risky!
upvoted 0 times
...
Nobuko
9 months ago
D seems overly complicated for this setup.
upvoted 0 times
...
Dorothy
9 months ago
C sounds right, but modifying /etc/resolv.conf? Really?
upvoted 0 times
...
Carmen
9 months ago
I think B is a bit off with that IP range.
upvoted 0 times
...
Wilda
9 months ago
A is the best option for private DNS resolution!
upvoted 0 times
...
Helga
9 months ago
I feel like option D is off because it mentions 35.199.192.0/19, which doesn't match our Compute Engine subnet. I think we should stick with 10.204.0.0/24.
upvoted 0 times
...
Raymon
9 months ago
I practiced a similar question where we had to set up DNS resolution between on-premises and cloud resources, but I can't recall if we should use a private zone or a forwarding zone here.
upvoted 0 times
...
Micah
9 months ago
I think option A sounds familiar because it mentions configuring the firewall for 10.204.0.0/24, which seems like the right subnet for our Compute Engine resources.
upvoted 0 times
...
Lynna
9 months ago
I remember we discussed private forwarding zones in Cloud DNS, but I'm not sure if we need to modify the /etc/resolv.conf file for this setup.
upvoted 0 times
...
Jerry
9 months ago
I feel like option D is off because it mentions 35.199.192.0/19, which doesn't match our Compute Engine subnet. I think we should stick with 10.204.0.0/24.
upvoted 0 times
...
Aracelis
9 months ago
I practiced a similar question where we had to set up DNS resolution between on-premises and cloud resources, but I can't recall if we should use a private zone or a forwarding zone here.
upvoted 0 times
...
Katina
9 months ago
I think option A sounds familiar because it mentions configuring the firewall for 10.204.0.0/24, which seems like the right subnet for our Compute Engine resources.
upvoted 0 times
...
Tori
10 months ago
I remember we discussed private forwarding zones in Cloud DNS, but I'm not sure if we need to modify the /etc/resolv.conf file for this setup.
upvoted 0 times
...
Brittni
10 months ago
Hmm, I'm a bit confused on this one. I know the stateful inspection firewall keeps track of connection state, but I'm not sure if that means it only needs to check the first packet or if it has to check each one. I'll have to think this through carefully.
upvoted 0 times
...
Bulah
10 months ago
I'm a bit confused on this one. I know we talked about event normalization, but I can't recall the specific details. I'll have to review my notes and try to remember which component was responsible for that. Hopefully, I can figure it out before the exam.
upvoted 0 times
...
Tarra
10 months ago
I believe it will be CSPOL_9 since it's the next one up, but I might be confusing that with another question I practiced.
upvoted 0 times
...

Save Cancel