AZ-700 Azure DNS and Private DNS 1 — Questions and Answers
Question 1: Which Azure DNS record type is used to map a domain name to an Azure resource and automatically updates when the resource's IP changes?
- A record
- CNAME record
- Alias record (Correct answer)
- PTR record
Correct answer: Alias record
Azure DNS Alias records are aware of Azure resource lifecycle and automatically reflect IP changes for resources like Public IPs, Traffic Manager, and CDN.
Question 2: What is the purpose of an Azure Private DNS Zone?
- Hosts public DNS records for custom domains
- Provides name resolution for resources within Azure VNets without public DNS exposure (Correct answer)
- Replaces Azure DNS public zones
- Enables DNSSEC for VNets
Correct answer: Provides name resolution for resources within Azure VNets without public DNS exposure
Azure Private DNS Zones provide DNS name resolution scoped to linked VNets, keeping records private and not resolvable from the internet.
Question 3: How do you enable automatic DNS registration of VM hostnames in an Azure Private DNS Zone?
- Enable 'auto-registration' when linking the VNet to the Private DNS Zone (Correct answer)
- Configure a custom DNS server on the VNet
- Set the VM's DNS suffix manually
- Deploy Azure DNS Private Resolver
Correct answer: Enable 'auto-registration' when linking the VNet to the Private DNS Zone
Enabling auto-registration on the VNet link causes VMs in that VNet to automatically register their hostname and IP in the Private DNS Zone.
Question 4: What is the maximum number of VNets you can link to a single Azure Private DNS Zone?
- 100
- 1,000 (Correct answer)
- 5,000 — standard limit
- Unlimited
Correct answer: 1,000
Each Azure Private DNS Zone supports up to 1,000 virtual network links, with auto-registration enabled on up to 100 of them.
Question 5: Which Azure service resolves Private DNS Zone names from on-premises networks connected via ExpressRoute or VPN?
- Azure DNS Public Zone
- Azure DNS Private Resolver with inbound/outbound endpoints (Correct answer)
- Azure Bastion DNS proxy
- Azure Virtual WAN DNS
Correct answer: Azure DNS Private Resolver with inbound/outbound endpoints
Azure DNS Private Resolver provides inbound endpoints that on-premises DNS servers can forward queries to for Private DNS Zone resolution.
Question 6: When configuring a CNAME record in Azure DNS, which limitation applies at the zone apex (root domain)?
- CNAMEs are allowed at apex with an additional flag
- CNAMEs cannot be used at the zone apex — use an Alias record instead (Correct answer)
- CNAMEs at apex require a wildcard certificate
- CNAMEs at apex need a higher DNS TTL
Correct answer: CNAMEs cannot be used at the zone apex — use an Alias record instead
DNS standards prohibit CNAME records at the zone apex (e.g., contoso.com); Azure DNS Alias records solve this for Azure resources.
AZ-700 Azure DNS and Private DNS 1
Which Azure DNS record type is used to map a domain name to an Azure resource and automatically updates when the resource's IP changes?