Google
PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #250
Your organization, TerramEarth, is launching a global application to manage credit card payments. There are some client VMs inside the same VPC as the application that need to access this application
Sign in or unlock PROFESSIONAL-CLOUD-NETWORK-ENGINEER to reveal the answer and full explanation for question #250. The question stem and answer options stay visible for context.
Submitted by khalil_dz· Apr 18, 2026Configuring network services
Question
Your organization, TerramEarth, is launching a global application to manage credit card payments. There are some client VMs inside the same VPC as the application that need to access this application privately. Due to compliance requirements, the internal clients cannot use the global external IP address of the application. Currently, Cloud DNS only resolves myglobalapp.terramearth.com to the public IP address with a public zone. The clients will need to reach myglobalapp.example.com, without using its external IP address. You need to configure Cloud DNS to follow this requirement while following Google-recommended practices. What should you do?
Options
- ACreate a sub-domain named internal.terramearth.com. Add the new DNS entry
- BConfigure a query logic script inside Cloud DNS to check the source IP address from the VPC,
- CConfigure a private zone for the application record (myglobalapp.terramearth.com) and point to
- DPromote the ephemeral IP address from the application VM to static, add this static ip address to
Unlock PROFESSIONAL-CLOUD-NETWORK-ENGINEER to see the answer
You've previewed enough free PROFESSIONAL-CLOUD-NETWORK-ENGINEER questions. Unlock PROFESSIONAL-CLOUD-NETWORK-ENGINEER for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Cloud DNS#Private Zones#Internal IP resolution#VPC Networking