Exam AZ-700 topic 2 question 67 discussion

Actual exam question from Microsoft's AZ-700

Question #: 67
Topic #: 2

HOTSPOT -

Your on-premises network contains a server named DNS1 that runs Windows Server 2022. DNS1 has the DNS server role and an IP address of 10.1.0.1. The network contains computers that use DNS1 for name resolution.

You have an Azure subscription that contains the resources shown in the following table.

The on-premises network connects to Vnet1 by using a Site-to-Site VPN.

You need to ensure that the computers on the on-premises network can resolve the IP address for sql1.private.fabrikam.com.

What should you do on DNS1 and DNS2? To answer, drag the appropriate actions to the correct servers. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by jorgesoma at Nov. 1, 2023, 2:08 p.m.

Comments

Submit Cancel

Lazylinux

Highly Voted 7 months, 3 weeks ago

The provided answer is INCORRECT On-prem DNS server DNS1 should be configured have conditional forwarder to forward traffic to AZ DNS server on IP 10.100.0.1 which acts as Azure DNS forwarder The Azure DNS server DNS2 - then forwards the DNS traffic to Azure recursive resolvers (IP 168.63.129.16) which in turn resolves the request to the on-prem client As NOTE: As of now and onwards - MS Azure no longer uses this method for name resolution to and from on-Prem - they have service called Azure DNS private resolver with inbound-outbound Endpoints with rule in place see link below - pay attention to the diagram https://learn.microsoft.com/en-us/azure/private-link/private-endpoint-dns#virtual-network-and-on-premises-workloads-using-a-dns-forwarder https://learn.microsoft.com/en-us/azure/virtual-network/what-is-ip-address-168-63-129-16

upvoted 19 times

Sergovladi

5 months, 3 weeks ago

Correct. However, it's up to you to decide whether to use Private DNS resolver or forwarders depending on the complexity.

upvoted 1 times

...

aminiasin

Highly Voted 6 months, 3 weeks ago

With the options the correct solution is. DNS1: Configure Conditional forwarding to DNS2 DNS2: Configure Conditional forwarding to 168.xx.xx.x In Decembre 2023 is posible avoid DNS2 with a new service DNS Private Resolver.

upvoted 14 times

...

getafix

Most Recent 4 months, 1 week ago

The answer is incorrect. The address 168.63.129.16 is an Azure internal address and it is not routable outside Azure. You cannot advertise this address out of Azure and it is not even visible to you to modify. Your on-prem DNS1 cannot directly communicate with this address. Your on-prem dns1 will communicate with the dns2 in Azure. The DNS2 in Azure will communicate with the 168.63.129.16 address which in turn will resolve the DNS record

upvoted 1 times

...