Professional Cloud Security EngineerConfiguring network securityMedium
A large enterprise is migrating its internal DNS infrastructure to Google Cloud. They have a complex internal network with multiple VPCs and Shared VPCs across several projects. They need to ensure that DNS resolution for internal resources is consistent and manageable across all these environments, without requiring manual configuration on every VM or application. Which Cloud DNS feature is specifically designed to facilitate this cross-VPC internal DNS resolution?
- ACloud DNS peering zones
- BCloud DNS response policy zones
- CCloud DNS forwarding zones
- DCloud DNS public zones
Show answer & explanationAnswer & explanation
Correct answer: A. Cloud DNS peering zones
Cloud DNS peering zones allow a VPC network to resolve DNS queries using the private zones configured in another VPC network. This is ideal for complex environments like Shared VPCs or multiple interconnected VPCs, ensuring consistent internal DNS resolution without manual configuration on each client.
Why the other options are wrong
- B. Response policy zones override DNS responses, which is not the primary mechanism for cross-VPC private zone resolution.
- C. Forwarding zones redirect queries to external DNS servers, not for resolving private zones across VPCs.
- D. Public zones are for public resolution, not internal cross-VPC.
Cloud DNS Peering Zones
Cloud DNS peering zones enable DNS resolution from a VPC network to the private zones configured in a peered VPC network, facilitating consistent internal DNS across complex environments.
- Cross-VPC private DNS resolution
- Works with VPC Network Peering
- Simplifies DNS management in multi-VPC setups
Memory trick: Peering zones let VPCs share their secret phone books.