ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 265 - AZ-104 discussion

Report
Export

You have an Azure Active Directory (Azure AD) tenant named contosocloud.onmicrosoft.com.

Your company has a public DNS zone for contoso.com.

You add contoso.com as a custom domain name to Azure AD.

You need to ensure that Azure can verify the domain name.

Which type of DNS record should you create?

A.
NSEC
Answers
A.
NSEC
B.
PTR
Answers
B.
PTR
C.
DNSKEY
Answers
C.
DNSKEY
D.
TXT
Answers
D.
TXT
Suggested answer: D

Explanation:

TXT : Correct Choice

You need to go to your hosting domain registrar and add in a TXT record.

NSEC3 : Incorrect Choice

This is Part of DNSSEC. This is used for explicit denial-of-existence of a DNS record. It is used to prove a name does not exist.

RRSIG : Incorrect Choice

This contains a cryptographic signature.

DNSKEY : Incorrect Choice

This will verify that the records are originating from an authorized sender.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-domain

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-domain#verifyyour-custom-domain-name

https://www.cloudflare.com/dns/dnssec/how-dnssecworks/#:~:text=DNSKEY%20%2D%20Contains%20a%20public%20signing,s)%20in%20the%20parent%20zone.

asked 26/09/2024
Tommy Svendsen
37 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first