Soru

Zorluk: OrtaDeploying Cloud Load Balancers and Configuring Cloud DNS

Your organization needs to configure Google Cloud DNS to resolve internal service hostnames to private IP addresses within a Virtual Private Cloud (VPC) network. In what order should an engineer perform the administrative steps to establish and validate internal DNS resolution?

  1. 1Create a Cloud DNS private managed zone specifying the internal domain name.
  2. 2Authorize the target VPC network to access the private managed zone.
  3. 3Create an A record set within the private managed zone mapping the hostname to the private IP address.
  4. 4Execute a DNS lookup tool (such as dig or nslookup) from a Compute Engine VM inside the authorized VPC network.

Cevap

The correct sequence is: 1) Create the Cloud DNS private managed zone, 2) Authorize the target VPC network, 3) Add the A record set mapping the hostname to the private IP address, and 4) Perform a DNS lookup test from a VM within the authorized VPC network.
The deployment workflow follows a logical dependency chain: First, create the private managed zone to establish the internal DNS namespace. Second, authorize the specific VPC network so instances in that network have permission to query the zone. Third, populate the zone by adding A records mapping service names to internal IP addresses. Fourth, test and verify resolution from a VM located inside the authorized network.

Adım Adım Çözüm

1
Initialize the Private Managed Zone
Creates the DNS namespace with private visibility scope in Cloud DNS.
You cannot add DNS records or authorize networks without an existing managed zone.
2
Bind Network Authorization
Associates the VPC network with the private managed zone.
Private DNS zones are invisible and inaccessible to VPC networks until explicitly authorized.
3
Add Resource Record Sets
Maps specific domain hostnames to their corresponding internal IPv4 addresses.
The zone container and authorization must exist before inserting resource records.
4
Validate DNS Resolution
Confirms successful name resolution from internal compute resources.
End-to-end testing requires both the record configuration and authorized network access to be active.

Anahtar Kavram

Cloud DNS Private Zone Creation and VPC Network Authorization Sequence
Tahmini Süre:1m 30s
Bu soruyu puanla