A company needs to publish the SPF and DKIM records for their email domain (example.com) so that external mail servers can validate their messages. These records should be publicly accessible. What type of Cloud DNS zone should they use, and what record types should they add?

Public zone; add TXT records for SPF and DKIM.

Public zone; add CNAME records for SPF and DKIM.

Private zone; add TXT records for SPF and DKIM.

Private zone; add CNAME records for SPF and DKIM.

A team runs a GKE cluster and uses an Ingress resource to expose a web service. They want the Ingress's external IP to be automatically registered as an A record in their Cloud DNS public zone whenever the Ingress is created or updated. What should they do?

Configure the GKE cluster's DNS to point to Cloud DNS and rely on the default service discovery.

Manually create an A record in Cloud DNS after each Ingress deployment, using the external IP from the Ingress status.

Deploy external-dns in the GKE cluster with a ServiceAccount that has permission to write to the Cloud DNS zone, and annotate the Ingress with the desired hostname.

Use a Kubernetes CronJob that periodically queries the Ingress IP and updates the DNS record via the Cloud DNS API.

When DNSSEC is enabled for a Cloud DNS zone, what does Cloud DNS manage automatically?

The VPC network's firewall rules

The zone's key-signing key (KSK) and zone-signing key (ZSK)

The registrar's name server records

A company runs self-hosted DNS servers on-premises and wants them to forward queries for a private zone to Cloud DNS. What should be configured?

A DNS server policy with inbound forwarding

An outbound DNS server policy with forwarding rules

Google CloudProfessional Cloud Network Engineer

Domain 3Objective 3

3.3 Configuring Cloud DNS. Considerations Include: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 2)

Part of the Section 3: Configuring managed network services (~16% of the exam) domain, which accounts for ~16% of the PROFESSIONAL-CLOUD-NETWORK-ENGINEER exam.

31questions here

7free pages

9concepts

~16%of the exam

Questions 6–10

6application · easy
A company needs to publish the SPF and DKIM records for their email domain (example.com) so that external mail servers can validate their messages. These records should be publicly accessible. What type of Cloud DNS zone should they use, and what record types should they add?
Select an answer first
7foundation · easy
A company needs DNS resolution for resources inside a VPC network, but the zone must not be visible to the public internet. Which Cloud DNS zone type should be used?
Select an answer first
8application · medium
A team runs a GKE cluster and uses an Ingress resource to expose a web service. They want the Ingress's external IP to be automatically registered as an A record in their Cloud DNS public zone whenever the Ingress is created or updated. What should they do?
Select an answer first
9foundation · easy
When DNSSEC is enabled for a Cloud DNS zone, what does Cloud DNS manage automatically?
Select an answer first
10foundation · easy
A company runs self-hosted DNS servers on-premises and wants them to forward queries for a private zone to Cloud DNS. What should be configured?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-NETWORK-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-NETWORK-ENGINEER” is a trademark of its owner, used for identification only.