Question

Your company runs several internal microservices on Compute Engine VMs within a single VPC network. Developers need to reach these services using friendly hostnames like api.internal.example.com instead of internal IP addresses, and these names must NOT be resolvable from the public internet. What should you configure?

Accepted Answer

Create a Cloud DNS private managed zone for internal.example.com and authorize the VPC network to use it

Answer

Create a Cloud DNS public managed zone for internal.example.com and add A records for each service

Answer

Add entries mapping each hostname to its internal IP in the /etc/hosts file of every VM manually

Answer

Register internal.example.com with an external domain registrar and point it to the VMs' external IPs