3.3 Configuring Cloud DNS. Considerations Include: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 7)

Questions 31–31

1. 31expert · hard

   A company is migrating a DNSSEC-signed domain from a legacy provider to Cloud DNS. They have exported the zone file, including the DNSKEY records, and created a new public zone in Cloud DNS. They have enabled DNSSEC on the new zone. What additional step is required to ensure the domain remains validated during the migration?

   • AImport the old DNSKEY records into the new zone to maintain the same keys.
   • BDisable DNSSEC on the old provider before migrating to avoid conflicts.
   • CUpdate the DS record at the registrar to match the new KSK's key tag and digest.
   • DSet the TTL of all records to 0 to ensure the new signatures propagate quickly.
   Reveal Solution Discussion Select an answer first