ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam AZ-700 All Questions

View all questions & answers for the AZ-700 exam
Go to Exam

Exam AZ-700 topic 2 question 67 discussion

Actual exam question from Microsoft's AZ-700
Question #: 67
Topic #: 2
[All AZ-700 Questions]

HOTSPOT
-

Your on-premises network contains a server named DNS1 that runs Windows Server 2022. DNS1 has the DNS server role and an IP address of 10.1.0.1. The network contains computers that use DNS1 for name resolution.

You have an Azure subscription that contains the resources shown in the following table.



The on-premises network connects to Vnet1 by using a Site-to-Site VPN.

You need to ensure that the computers on the on-premises network can resolve the IP address for sql1.private.fabrikam.com.

What should you do on DNS1 and DNS2? To answer, drag the appropriate actions to the correct servers. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Show Suggested Answer Hide Answer
Suggested Answer:
by jorgesoma at Nov. 1, 2023, 2:08 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Lazylinux
Highly Voted 6 months ago
The provided answer is INCORRECT On-prem DNS server DNS1 should be configured have conditional forwarder to forward traffic to AZ DNS server on IP 10.100.0.1 which acts as Azure DNS forwarder The Azure DNS server DNS2 - then forwards the DNS traffic to Azure recursive resolvers (IP 168.63.129.16) which in turn resolves the request to the on-prem client As NOTE: As of now and onwards - MS Azure no longer uses this method for name resolution to and from on-Prem - they have service called Azure DNS private resolver with inbound-outbound Endpoints with rule in place see link below - pay attention to the diagram https://learn.microsoft.com/en-us/azure/private-link/private-endpoint-dns#virtual-network-and-on-premises-workloads-using-a-dns-forwarder https://learn.microsoft.com/en-us/azure/virtual-network/what-is-ip-address-168-63-129-16
upvoted 19 times
Sergovladi
4 months ago
Correct. However, it's up to you to decide whether to use Private DNS resolver or forwarders depending on the complexity.
upvoted 1 times
...
...
aminiasin
Highly Voted 5 months, 1 week ago
With the options the correct solution is. DNS1: Configure Conditional forwarding to DNS2 DNS2: Configure Conditional forwarding to 168.xx.xx.x In Decembre 2023 is posible avoid DNS2 with a new service DNS Private Resolver.
upvoted 14 times
...
getafix
Most Recent 2 months, 2 weeks ago
The answer is incorrect. The address 168.63.129.16 is an Azure internal address and it is not routable outside Azure. You cannot advertise this address out of Azure and it is not even visible to you to modify. Your on-prem DNS1 cannot directly communicate with this address. Your on-prem dns1 will communicate with the dns2 in Azure. The DNS2 in Azure will communicate with the 168.63.129.16 address which in turn will resolve the DNS record
upvoted 1 times
...
Discussions22
6 months, 1 week ago
What is correct if we have no?
upvoted 1 times
...
ExamTopics2_EIS
6 months, 2 weeks ago
Clearly this is not correct. DNS2 is creating a forwarding to it's own IP address?
upvoted 5 times
...
Dungeon_Master
6 months, 2 weeks ago
DNS1: Configure COnditional forwarding to DNS2 DNS2: Configure COnditional forwarding to 168.x.x.x
upvoted 6 times
jorgesoma
6 months ago
I think it's correct. DNS1 (On-Prem): Forward to DNS2 (VM on Azure) DNS2 (Azure): Forward to 168.x.x.x (Azure DNS)
upvoted 5 times
...
...
jorgesoma
6 months, 2 weeks ago
Is it correct?
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago