AZ-700 Azure DNS and Private DNS 2 — Questions and Answers
Question 1: Which Private DNS Zone name should you use for automatic private endpoint DNS resolution of Azure Blob Storage?
- privatelink.blob.core.windows.net (Correct answer)
- blob.privatelink.azure.com
- storage.private.azure.net
- privatelink.storage.windows.net
Correct answer: privatelink.blob.core.windows.net
Azure Blob Storage private endpoints use the zone 'privatelink.blob.core.windows.net' for DNS resolution to private IPs.
Question 2: What DNS record type is created in a Private DNS Zone when a Private Endpoint is configured?
- CNAME pointing to the public endpoint
- A record mapping the service FQDN to the private IP (Correct answer)
- MX record for service routing
- SRV record for service discovery
Correct answer: A record mapping the service FQDN to the private IP
A Private Endpoint creates an A record in the private DNS zone mapping the service's FQDN to its assigned private IP address.
Question 3: In Azure DNS, what is the minimum TTL (Time to Live) value allowed for a DNS record?
- 0 (Correct answer)
- 1 second
- 60 seconds
- 300 seconds
Correct answer: 0
Azure DNS allows a TTL of 0, though values this low are impractical and Microsoft recommends a minimum TTL of 300 seconds.
Question 4: Which Azure feature allows you to delegate a subdomain to Azure DNS while keeping the parent zone with another registrar?
- DNS forwarding
- NS record delegation (Correct answer)
- Zone transfer
- DNS alias chaining
Correct answer: NS record delegation
By creating NS records for the subdomain at the parent registrar pointing to Azure DNS name servers, you delegate that subdomain to Azure DNS.
Question 5: What is the purpose of the Azure DNS Private Resolver outbound endpoint?
- Accepts DNS queries from on-premises forwarded to Azure
- Forwards DNS queries from Azure to on-premises or external DNS servers (Correct answer)
- Provides DNSSEC validation for outbound queries
- Routes DNS traffic through Azure Firewall
Correct answer: Forwards DNS queries from Azure to on-premises or external DNS servers
The outbound endpoint of Azure DNS Private Resolver allows DNS queries originating in Azure to be conditionally forwarded to on-premises or external DNS servers.
Question 6: Which DNS record type is used in Azure DNS to provide reverse DNS lookups (IP address to hostname)?
- A record
- AAAA record
- PTR record (Correct answer)
- SOA record
Correct answer: PTR record
PTR (pointer) records are used for reverse DNS lookups, mapping an IP address back to a hostname.
AZ-700 Azure DNS and Private DNS 2
Which Private DNS Zone name should you use for automatic private endpoint DNS resolution of Azure Blob Storage?