Objective 3.3

PCNE

Configuring Cloud DNS

Objective 3.3 sits in Configuring managed network services, which carries 16% of the Cloud Network Engineer exam. The questions below are original, written from the official objective title above, and each explanation cites the Google Cloud page it rests on.

Objective title verbatim from the official objectives. Google Cloud exam page

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

3-3Configuring managed network services

A team configures a forwarding zone whose target name server is given as a domain name rather than an address. How many forwarding targets may that zone list?

TwoA second entry is not accepted alongside a name.
TenNo such allowance exists for name-based targets.
OneCorrect · your answerCorrect. The name itself carries the fan-out.
FiftyThat figure counts resolved addresses, not configured targets.

Correct.

Concept

Specifying a target by name shifts the fan-out into resolution time, so the configuration itself is held to a single entry.

Why C

When an FQDN is used as the target name server, only a single forwarding target may be configured, and that name can resolve to as many as 50 IP addresses.

Source

If you use an FQDN as the target name server, review the following items: You can only have a single forwarding target. FQDN target resolution through another forwarding zone isn't supported. You can't use an FQDN as an alternative name server in server policies. An FQDN target can resolve to up to 50 associated IP addresses. Any resolved addresses over 50 are truncated.

DNS zones overview, checked August 2026
#gcp#cloud-dns#forwarding-zone#fqdn

Now you: objective 3.3 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

3-3Configuring managed network services

An engineer selects private routing on a forwarding zone and then lists a public resolver on the internet as one of its targets. What does that combination produce?

Sample question 2 of 3

3-3Configuring managed network services

Two private zones authorized to the same network cover example.com and dev.example.com. A VM queries api.dev.example.com. Which zone answers it?

Sample question 3 of 3

3-3Configuring managed network services

An on-premises network reaches vpc-net-a over Cloud Interconnect, and vpc-net-b peers with vpc-net-a and imports its custom routes. A VM in vpc-net-b cannot resolve through a forwarding zone whose targets are on-premises. What accounts for that?

Full Cloud Network Engineer question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Configuring managed network services