MENU
There are two established Partner Interconnect connections between your on-premises network and Google Cloud. The VPC that hosts the Partner Interconnect connections is named "vpc-a" and contains three VPC subnets across three regions, Compute Engine instances, and a GKE cluster. Your on-premises users would like to resolve records hosted in a Cloud DNS private zone following Google-recommended practices. You need to implement a solution that allows your on-premises users to resolve records that are hosted in Google Cloud. What should you do?
Suggested Answer: A
Get Premium Professional Cloud Network Engineer Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Associating the private zone to 'vpc-a' and creating an outbound forwarding policy allows DNS queries to be forwarded from on-premises to Google Cloud DNS. The on-premises DNS servers will forward queries to the entry points created when the forwarding policy was applied to 'vpc-a,' enabling proper name resolution.
27 comments · newest first
PA
Paulina
11 months ago
A is definitely the Google-recommended way to go!
EL
Eleonora
11 months ago
Wait, 169.254.169.254? That seems sketchy, is that really a good idea?
CY
Cyril
11 months ago
I disagree, C is not a standard practice for DNS resolution.
KE
Kenda
11 months ago
I think B could work too, but it feels a bit more complex.
FE
Felix
12 months ago
Option A seems like the best fit for this setup.
AL
Alexia
12 months ago
I vaguely recall something about inbound forwarding policies, but I’m not confident if that’s the right approach for this scenario.
RO
Rosita
1 year ago
I feel like using a DNS proxy in GKE could work, but I’m not clear on how to set up the internal load balancer properly.
VE
Velda
1 year ago
I think option A sounds familiar from our practice questions, but I’m a bit confused about the entry point addresses.
EL
Elise
1 year ago
I remember we discussed the importance of associating the private zone with the correct VPC, but I'm not sure if it's outbound or inbound forwarding we need.
DO
Dorthy
1 year ago
Option B with the DNS proxy service in the GKE cluster could also work, but it seems a bit more complex than the approach in Option A. I'd want to make sure I fully understand how to set up and configure the internal load balancer for the DNS proxy service.
ME
Melita
1 year ago
I'm pretty confident that Option A is the correct answer here. Associating the private zone to the VPC, creating the outbound forwarding policy, and configuring the on-premises DNS servers to forward queries seems like the cleanest and most straightforward way to implement the solution based on the information provided.
DI
Diane
1 year ago
Hmm, I'm a bit confused about the difference between an outbound forwarding policy and an inbound forwarding policy. Option D mentions an inbound policy, but the question specifically says to use Google-recommended practices, which I think points to Option A.
AR
Arlette
1 year ago
I think the key here is to use the Google-recommended practices to allow on-premises users to resolve records in the Cloud DNS private zone. Option A looks like the right approach - associate the private zone to the VPC, create an outbound forwarding policy, and configure the on-premises DNS servers to forward queries to the entry point addresses.
VE
Veronika
2 years ago
I think option A is the best choice as it follows Google-recommended practices for resolving records hosted in Cloud DNS private zones.
GI
Gilma
2 years ago
Alternatively, we could use custom route advertisements to announce 169.254.169.254 via BGP to the on-premises environment.
RA
Raelene
2 years ago
Option D looks a bit sketchy to me. Inbound forwarding policies don't sound like they'd work well for this use case.
TH
Theron
2 years ago
Haha, using 169.254.169.254 for DNS? That's like a blast from the past! I'll pass on that one.
KR
Kris
2 years ago
User2
LE
Leonor
2 years ago
User1
EV
Evelynn
2 years ago
I agree. We can then configure the on-premises DNS servers to forward queries for the private zone to the entry point addresses.
LA
Laurene
2 years ago
I think we should associate the private zone to 'vpc-a' and create an outbound forwarding policy.
CA
Carri
2 years ago
I'm not sure about using a DNS proxy service in GKE. That seems like it might add unnecessary complexity to the setup.
SA
Salena
2 years ago
Option A seems like the way to go. Forwarding the queries through an outbound policy is a clean and straightforward solution.
TE
Tequila
2 years ago
User 4: Yeah, configuring the on-premises DNS servers to forward queries to the entry point addresses created with the policy attached to 'vpc-a' makes sense.
GE
Gerri
2 years ago
User 3: It definitely seems like the most efficient way to allow on-premises users to resolve records hosted in Google Cloud.
MA
Margarita
2 years ago
User 2: I agree, associating the private zone to 'vpc-a' and creating an outbound forwarding policy sounds like the best approach.
AN
Antione
2 years ago
User 1: Option A seems like the way to go. Forwarding the queries through an outbound policy is a clean and straightforward solution.