Examkin

Question

Difficulty: MediumDeploying Cloud Load Balancers and Configuring Cloud DNS

Your organization maintains a private Cloud DNS zone hosted in `vpc-shared-services` that resolves internal service domain names. A team deploying a separate workload in `vpc-analytics` needs their Compute Engine instances to resolve these internal DNS names without duplicating DNS records. Which configuration should you implement to enable internal DNS resolution from `vpc-analytics`?

  1. Create a Cloud DNS Peering zone associated with `vpc-analytics` that specifies `vpc-shared-services` as the target peer network.Answer
  2. B
    Deploy a Global External HTTP(S) Load Balancer in `vpc-analytics` configured with a backend service targeting DNS port 53 in `vpc-shared-services`.
  3. C
    Enable the Cloud DNS API directly inside `vpc-analytics` and create a public DNS zone with the same private domain name.
  4. D
    Modify the subnet CIDR ranges in `vpc-analytics` so they overlap with `vpc-shared-services` subnets to allow automatic DNS broadcast.

Answer

Create a Cloud DNS Peering zone associated with `vpc-analytics` that specifies `vpc-shared-services` as the target peer network.
Cloud DNS Peering allows queries for private DNS zones to be forwarded from one VPC network (the querying network) to another VPC network (the peer network) where the private zone is authorized. Creating a DNS peering zone in `vpc-analytics` targeting `vpc-shared-services` allows `vpc-analytics` to resolve private records without needing direct authorization on the managed zone or duplicating record sets.

Step-by-Step Solution

1
Identify the cross-VPC private DNS resolution requirement.
Determine that `vpc-analytics` needs to query a private DNS zone managed inside `vpc-shared-services`.
Cloud DNS private zones are by default only accessible to the authorized VPC networks explicitly listed in the zone configuration.
2
Select the appropriate GCP Cloud DNS feature for sharing DNS resolution across VPC networks.
Choose Cloud DNS Peering.
Cloud DNS Peering allows a source VPC network to delegate queries for a domain namespace to a peer target VPC network where the zone is configured.
3
Configure the DNS Peering zone settings.
Associate the peering zone with `vpc-analytics` and set `vpc-shared-services` as the peer network.
This establishes a DNS forwarding path so instances in `vpc-analytics` can seamlessly resolve private records without maintaining duplicate records.

Key Concept

Cloud DNS Peering for Cross-VPC Private Zone Resolution
Estimated Time:1m 30s
Rate this question

Topics

Deploying Cloud Load Balancers and Configuring Cloud DNS

More questions from this topic