Google Cloud’s managed DNS service. Public zones publish records on the internet; private zones only resolve from authorized VPC networks.
On the ACE you use a private zone so VMs resolve internal names (such as db.internal.company.com) without exposing them on the internet.
Cloud DNS is a concept that can show up on the exam. Check the full guide to see it in context.