Courseiva
Configuring Network ServiceseasyMultiple ChoiceObjective-mapped

PCNE Configuring Network Services Practice Question

A company has a Cloud VPN tunnel to on-premises. They want on-premises clients to resolve private DNS names in the VPC. Which service should they configure?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Inbound DNS policy

An inbound DNS policy forwards DNS queries from on-premises DNS servers to Cloud DNS, enabling resolution of private zone names. Option B (Outbound DNS policy) is for forwarding queries from VMs to on-premises DNS, the opposite direction. Option C (Cloud NAT) provides outbound internet access for VMs, not DNS resolution. Option D (Private Google Access) allows VMs with internal IPs to reach Google APIs, not on-premises DNS resolution.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Inbound DNS policy

    Why this is correct

    An inbound DNS policy allows on-premises DNS servers to forward queries to Cloud DNS.

  • Outbound DNS policy

    Why it's wrong here

    Outbound DNS policy is for VMs to forward queries to on-premises DNS.

  • Cloud NAT

    Why it's wrong here

    Cloud NAT provides outbound internet access, not DNS resolution.

  • Private Google Access

    Why it's wrong here

    Private Google Access enables VMs to reach Google APIs without external IPs.

Visual reference

Inside (Private) PC-A 10.0.0.1 PC-B 10.0.0.2 NAT Router Outside (Public) 203.0.113.1 Inside Global Server PAT: many private IPs share one public IP via unique port numbers

About these practice questions

Courseiva writes every PCNE question from scratch — 961 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This PCNE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNE exam.