ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 192 - Associate Cloud Engineer discussion

Report
Export

Your company has embraced a hybrid cloud strategy where some of the applications are deployed on Google Cloud. A Virtual Private Network (VPN) tunnel connects your Virtual Private Cloud (VPC) in Google Cloud with your company's on-premises network. Multiple applications in Google Cloud need to connect to an on-premises database server, and you want to avoid having to change the IP configuration in all of your applications when the IP of the database changes.

What should you do?

A.
Configure Cloud NAT for all subnets of your VPC to be used when egressing from the VM instances.
Answers
A.
Configure Cloud NAT for all subnets of your VPC to be used when egressing from the VM instances.
B.
Create a private zone on Cloud DNS, and configure the applications with the DNS name.
Answers
B.
Create a private zone on Cloud DNS, and configure the applications with the DNS name.
C.
Configure the IP of the database as custom metadata for each instance, and query the metadata server.
Answers
C.
Configure the IP of the database as custom metadata for each instance, and query the metadata server.
D.
Query the Compute Engine internal DNS from the applications to retrieve the IP of the database.
Answers
D.
Query the Compute Engine internal DNS from the applications to retrieve the IP of the database.
Suggested answer: B

Explanation:

Forwarding zones Cloud DNS forwarding zones let you configure target name servers for specific private zones. Using a forwarding zone is one way to implement outbound DNS forwarding from your VPC network. A Cloud DNS forwarding zone is a special type of Cloud DNS private zone. Instead of creating records within the zone, you specify a set of forwarding targets. Each forwarding target is an IP address of a DNS server, located in your VPC network, or in an on-premises network connected to your VPC network by Cloud VPN or Cloud Interconnect.

https://cloud.google.com/nat/docs/overview

DNS configuration Your on-premises network must have DNS zones and records configured so that Google domain names resolve to the set of IP addresses for either private.googleapis.com or restricted.googleapis.com. You can create Cloud DNS managed private zones and use a Cloud DNS inbound server policy, or you can configure on-premises name servers. For example, you can use BIND or Microsoft Active Directory DNS. https://cloud.google.com/vpc/docs/configure-private-google-access-hybrid#config-domain

asked 18/09/2024
Maria Gervasi
37 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first