Google PCA Practice Question: Managing and Provisioning a Solution Infrastructure
An organization wants to manage DNS records for a domain they own (e.g., example.com) and use Google Cloud for authoritative DNS. They also need to resolve internal hostnames for resources within their VPC. Which Cloud DNS configuration should they use?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create a public managed zone for example.com and a private managed zone for internal VPC resources
Cloud DNS public zones manage public DNS records for internet-facing domains. Cloud DNS private zones are used for internal DNS resolution within VPCs. The correct approach is to create a public zone for example.com and a private zone for internal hostnames attached to the VPC.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Create a single public managed zone and use DNS peering for internal resolution
Why it's wrong here
DNS peering forwards queries between zones, but a public zone alone cannot resolve internal hostnames within a VPC.
- ✗
Create a single private managed zone for both external and internal DNS resolution
Why it's wrong here
A private zone is only accessible within the VPC; external queries would not be answered.
- ✗
Use Google Groups DNS to manage both public and private records
Why it's wrong here
There is no such service as Google Groups DNS. Cloud DNS is the only DNS service.
- ✓
Create a public managed zone for example.com and a private managed zone for internal VPC resources
Why this is correct
Public zone handles external DNS queries; private zone attached to the VPC handles internal resolution.
Visual reference
Go deeper
Related to this question
Learn chapter
Introduction to Google Cloud Platform
Key term
Fully Qualified Domain Name
A Fully Qualified Domain Name is the complete and unambiguous website or server name that includes the host, domain, and top-level domain, leaving no room for guesswork.
Key term
Cloud DNS
A managed domain name system service that translates human-readable domain names into IP addresses, enabling reliable and scalable network routing in cloud environments.
About these practice questions
This PCA question is part of Courseiva's 955-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCA practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCA exam.