Courseiva
Configuring Network ServiceshardMultiple SelectObjective-mapped

PCNE Configuring Network Services Practice Question

A company wants to use Cloud DNS response policy zones (RPZ) to override DNS responses for a set of internal domains. They need to ensure that only specific VPC networks can use these overrides. Which three steps are required? (Choose three.)

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Bind the response policy zone to the desired VPC networks

To use RPZ, you must create the response policy zone, bind it to the target VPC network(s), and ensure that the DNS queries from those VPCs use Cloud DNS. Additionally, you may need to configure the resolver. The correct steps: create the RPZ, bind it to VPC networks, and specify the DNS overrides (rules).

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Create a forwarding zone for the overridden domains

    Why it's wrong here

    Forwarding zones are for forwarding queries to another DNS server, not for overrides.

  • Enable DNSSEC on the response policy zone

    Why it's wrong here

    DNSSEC is not required for RPZ.

  • Bind the response policy zone to the desired VPC networks

    Why this is correct

    RPZ is applied per VPC network.

  • Add DNS overrides (rules) to the response policy zone

    Why this is correct

    Define the actual overrides.

  • Create a response policy zone

    Why this is correct

    You must first create the response policy zone.

Visual reference

Client Recursive Resolver Root DNS (13 root servers) TLD DNS (.com, .org, …) Authoritative example.com query IP addr answer

About these practice questions

Courseiva writes every PCNE question from scratch — 961 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This PCNE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNE exam.