You are disabling DNSSEC for one of your Cloud DNS-managed zones.

Vendor: Google
Product: Professional-Cloud-Network-Engineer
Update on: Jul 28, 2025
Questions: 233

Google Professional-Cloud-Network-Engineer Question Answer

You are disabling DNSSEC for one of your Cloud DNS-managed zones. You removed the DS records from your zone file, waited for them to expire from the cache, and disabled DNSSEC for the zone. You receive reports that DNSSEC validating resolves are unable to resolve names in your zone.

What should you do?

Update the TTL for the zone.

Set the zone to the TRANSFER state.

Disable DNSSEC at your domain registar.

Transfer ownership of the domain to a new registar.