Examkin

Question

Difficulty: MediumDeploying Cloud Load Balancers and Configuring Cloud DNS

Your organization is establishing a hybrid cloud architecture connecting an on-premises data center to a Google Cloud Virtual Private Cloud (VPC) network via Cloud VPN. On-premises client machines need to resolve private DNS queries for instances hosted in GCP ending with `.internal.example.com`. You need to configure Cloud DNS to allow on-premises systems to resolve these names. Which TWO configuration steps are required to satisfy this requirement?

  1. Create an Inbound DNS server policy in Cloud DNS assigned to the target VPC network.Answer
  2. Configure the on-premises DNS servers to forward queries for `.internal.example.com` to the Cloud DNS Inbound forwarder IP addresses.Answer
  3. C
    Enable the Cloud DNS API within the on-premises directory project management workspace instead of the GCP VPC host project.
  4. D
    Create a Cloud DNS Outbound forwarding zone pointing to the on-premises DNS server IP addresses to handle client requests originating from on-premises.

Answer

To enable on-premises clients to resolve GCP private DNS records over Cloud VPN, you must create an Inbound DNS server policy assigned to the VPC network to allocate inbound forwarder IP addresses, and then configure the on-premises DNS servers to forward domain queries for `.internal.example.com` to those entry-point IP addresses.
Enabling on-premises resolution of GCP private DNS names requires an Inbound DNS server policy attached to the VPC network. This creates entry-point IP addresses inside the VPC subnets. The on-premises DNS server must then be configured with conditional forwarding to target those entry-point IPs for the GCP internal domain name space.

Step-by-Step Solution

1
Configure an Inbound DNS server policy in Cloud DNS for the target VPC.
Cloud DNS reserves entry-point IP addresses in the VPC subnets specifically designed to receive incoming DNS queries from connected hybrid networks.
On-premises systems cannot query GCP Private DNS zones directly without an active inbound forwarding entry point exposed on the VPC.
2
Set up conditional DNS forwarding on the on-premises DNS infrastructure.
Requests for `.internal.example.com` originating from local networks are routed across the VPN tunnel to Cloud DNS.
On-premises systems query local DNS resolvers first; those resolvers need explicit instructions to send specific GCP domain queries to the Cloud DNS inbound entry-point IPs.

Key Concept

Cloud DNS Inbound Forwarding for Hybrid Architecture
Rate this question

Topics

Deploying Cloud Load Balancers and Configuring Cloud DNS

More questions from this topic