After creating Cloud DNS inbound endpoints, which IP addresses should on-prem DNS servers use as forward targets to reach those inbound endpoints?

On-prem DNS servers should use the regional internal IP addresses assigned to the inbound endpoint VMs. Cloud DNS inbound endpoints provision internal IP addresses within a specified VPC subnet. These internal IPs are the direct targets for DNS queries originating from on-premises networks that need to resolve names within your Google Cloud VPC. Incorrect options: A global Cloud DNS anycast public IP address is used for public DNS resolution, not for inbound private DNS queries to your VPC. The IP address of a Cloud NAT gateway is for outbound connections from private instances to the internet, not for inbound DNS resolution. The public IP address configured on the forwarding managed zone is not applicable here; inbound endpoints provide a private, internal resolution path.