Courseiva
← PCNE
Full test
Configuring Network Services →hardMultiple ChoiceObjective-mapped

PCNE Configuring Network Services Practice Question

A company uses Cloud DNS with a managed zone for example.com. They want to override DNS responses for a specific subdomain, mail.example.com, to point to an internal IP address when queried from within the VPC, but external queries should resolve normally. Which feature should they use?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Response Policy Zone (RPZ)

Response Policy Zones (RPZ) allow you to override DNS responses for specific domains based on the source network. This is used for DNS filtering or overriding.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    DNS Security Extensions (DNSSEC)

    Why it's wrong here

    DNSSEC is for integrity and authenticity, not response overriding.

  • ✗

    Private DNS zone

    Why it's wrong here

    A private DNS zone would override all queries for the zone, not just a subdomain selectively.

  • ✓

    Response Policy Zone (RPZ)

    Why this is correct

    Correct. RPZ can override DNS responses for specific domains within a VPC.

  • ✗

    Routing policy (weighted or geo)

    Why it's wrong here

    Routing policies are for traffic distribution, not DNS overrides.

Visual reference

Client Recursive Resolver Root DNS (13 root servers) TLD DNS (.com, .org, …) Authoritative example.com query IP addr answer

About these practice questions

This PCNE question is part of Courseiva's 961-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This PCNE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNE exam.