Examkin

Soru

Zorluk: OrtaDeploying Cloud Load Balancers and Configuring Cloud DNS

Your organization maintains a private Cloud DNS zone hosted in `vpc-shared-services` that resolves internal service domain names. A team deploying a separate workload in `vpc-analytics` needs their Compute Engine instances to resolve these internal DNS names without duplicating DNS records. Which configuration should you implement to enable internal DNS resolution from `vpc-analytics`?

  1. Create a Cloud DNS Peering zone associated with `vpc-analytics` that specifies `vpc-shared-services` as the target peer network.Cevap
  2. B
    Deploy a Global External HTTP(S) Load Balancer in `vpc-analytics` configured with a backend service targeting DNS port 53 in `vpc-shared-services`.
  3. C
    Enable the Cloud DNS API directly inside `vpc-analytics` and create a public DNS zone with the same private domain name.
  4. D
    Modify the subnet CIDR ranges in `vpc-analytics` so they overlap with `vpc-shared-services` subnets to allow automatic DNS broadcast.

Cevap

Create a Cloud DNS Peering zone associated with `vpc-analytics` that specifies `vpc-shared-services` as the target peer network.
Cloud DNS Peering allows queries for private DNS zones to be forwarded from one VPC network (the querying network) to another VPC network (the peer network) where the private zone is authorized. Creating a DNS peering zone in `vpc-analytics` targeting `vpc-shared-services` allows `vpc-analytics` to resolve private records without needing direct authorization on the managed zone or duplicating record sets.

Adım Adım Çözüm

1
Identify the cross-VPC private DNS resolution requirement.
Determine that `vpc-analytics` needs to query a private DNS zone managed inside `vpc-shared-services`.
Cloud DNS private zones are by default only accessible to the authorized VPC networks explicitly listed in the zone configuration.
2
Select the appropriate GCP Cloud DNS feature for sharing DNS resolution across VPC networks.
Choose Cloud DNS Peering.
Cloud DNS Peering allows a source VPC network to delegate queries for a domain namespace to a peer target VPC network where the zone is configured.
3
Configure the DNS Peering zone settings.
Associate the peering zone with `vpc-analytics` and set `vpc-shared-services` as the peer network.
This establishes a DNS forwarding path so instances in `vpc-analytics` can seamlessly resolve private records without maintaining duplicate records.

Anahtar Kavram

Cloud DNS Peering for Cross-VPC Private Zone Resolution
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Deploying Cloud Load Balancers and Configuring Cloud DNS

Bu konudan daha fazla soru