Exam AZ-104 All Questions

View all questions & answers for the AZ-104 exam

Exam AZ-104 topic 2 question 17 discussion

Actual exam question from Microsoft's AZ-104

Question #: 17
Topic #: 2

You have an Azure Active Directory (Azure AD) tenant named contosocloud.onmicrosoft.com.
Your company has a public DNS zone for contoso.com.
You add contoso.com as a custom domain name to Azure AD.
You need to ensure that Azure can verify the domain name.
Which type of DNS record should you create?

A. MX
B. NSEC
C. PTR
D. RRSIG

Show Suggested Answer

Suggested Answer: A 🗳️

by silvervlad at Dec. 1, 2020, 4:23 a.m.

Comments

Submit Cancel

ms70743

Highly Voted 4 years, 6 months ago

TXT and MX are valid answers.

upvoted 108 times

...

sidharthwader

Highly Voted 4 years, 2 months ago

So guys i will try to give an expiation to this question. When you add a custom domain in azure u are not allowed to use that unless u prove its your domain.So once u add the custom domain name azure asks u to verify and you have to provide some inputs to verify that its your these inputs can be provided in TXT or MX. So its MX in this case

upvoted 85 times

Amrinder101

2 years, 7 months ago

Why would you update MX record? Its used for mail servers. The email delivery will stop working if you update MX records. TXT is always used for domain verification.

upvoted 10 times

jackill

1 year, 11 months ago

Although the reference provided (https://docs.microsoft.com/en-us/azure/dns/dns-web-sites-custom-domain) do not mention MX record, my understanding is that both TXT and MX can be used to perform the validation step. The TXT/MX record added is needed only for the verification step (to assure that you are the owner of the domain), after that it can be removed. The similar document for Microsoft 365 clarifies this: https://learn.microsoft.com/en-us/microsoft-365/admin/get-help-with-domains/create-dns-records-at-any-dns-hosting-provider?view=o365-worldwide#verify-with-an-mx-record It also clarify that you can add this verification MX record with an high priority number to avoid the record to be effectively used to forward emails: “This MX record's Priority must be the highest of all existing MX records for the domain. Otherwise, it can interfere with sending and receiving email. You should delete this records as soon as domain verification is complete.” I suppose that the usage of MX record was introduced due to some restriction on the handling of TXT records by some DNS registrars, but I do not have found direct evidence for this.

upvoted 3 times

...

e_karma

3 years, 7 months ago

I didn't know mx was there usually it is txt record ..thanks for this

upvoted 7 times

sairaj9396

3 years, 1 month ago

same here. i thought mx is explicitly for mail exchange

upvoted 7 times

Howard20717

1 year, 2 months ago

yea, me too. Never use MX record for this purpose

upvoted 2 times

...

JayBee65

4 years ago

Thank you - the process is covered here where you can see either TXT or MX can be chosen: https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-domain

upvoted 18 times

Lamini

3 years, 7 months ago

Hopefully they update the reference; its not valid. The reference above by JayBee65 is correct as there is no mention of MX in current reference.

upvoted 4 times

...

khamrumunnu

Most Recent 1 month, 1 week ago

Selected Answer: A

The correct answer is: A. MX Why not the others? B. NSEC and D. RRSIG are DNSSEC-related records used for DNS security, not for domain ownership verification. C. PTR records are used for reverse DNS lookups (IP address to domain name), which is unrelated to domain verification.

upvoted 2 times

...

khamrumunnu

1 month, 1 week ago

Selected Answer: A

upvoted 1 times

...

nnamacha

3 months, 2 weeks ago

Selected Answer: C

I would go for PTR looking at the available options . The correct answer should be TXT https://www.cloudflare.com/learning/dns/dns-records/dns-ptr-record/

upvoted 1 times

...

Mark74

6 months, 3 weeks ago

Selected Answer: A

Mx record for me is correct

upvoted 1 times

...

[Removed]

9 months, 4 weeks ago

Selected Answer: A

A is corerct

upvoted 1 times

...

Amir1909

1 year, 4 months ago

A is correct

upvoted 1 times

...

DWILK

1 year, 8 months ago

Why would a Mail Exchange record have to be created? Mail isn't mentioned in the question. This has to be wrong

upvoted 3 times

...

nmnm22

1 year, 9 months ago

if this list had the Cname record option, would we still need to pick "MX" as an answer? can someone explain why, please?

upvoted 1 times

...

abrar_jahat

1 year, 9 months ago

Selected Answer: A

upvoted 2 times

...

itguyeu

2 years ago

I used free version access for this site and it helped me pass the exam. Some questions that I had on the exams, I took the exam more than once, are not available under the free tier access, but 80% of the questions came from here. I do recommend investing a bit of money and getting full access to this site. I didn't memorise answers but analysed them and studied as Microsoft does tweak them a bit. This Q was on the exam and answer is correct.

upvoted 1 times

...

TonySuccess

2 years ago

Selected Answer: A

Of the available options this is MX (A)

upvoted 1 times

...

Madbo

2 years, 2 months ago

Option A is correct. When you add a custom domain name to Azure AD, you need to verify that you own the domain by creating a DNS record in your domain's DNS zone that points to Azure AD. In this case, you added contoso.com as a custom domain name to Azure AD, which means you need to create a DNS record in the DNS zone for contoso.com. The type of DNS record that you need to create is a TXT record, which contains a verification code that Azure AD provides. The TXT record should be created in the DNS zone for the domain name you added to Azure AD (in this case, contoso.com), and the value of the TXT record should be set to the verification code provided by Azure AD. Once you create the TXT record, Azure AD can verify that you own the domain name and you can start using it in Azure AD. Therefore, option A is correct as an MX record is used for mail exchange, NSEC and RRSIG records are used for DNSSEC validation, and a PTR record is used for reverse DNS lookups.

upvoted 3 times

...

kklohit

2 years, 4 months ago

No, MX record is used to specify the mail server responsible for accepting email messages for the domain, it is not used to verify the domain for Azure AD. The correct answer is TXT record, which is used to verify the ownership of the domain. To verify the domain name in Azure AD, you need to create a DNS TXT record in your public DNS zone for contoso.com. The value of the record should be the domain verification code that you can get from the Azure portal. Therefore, the correct answer is not listed among the options given.

upvoted 2 times

...

NaoVaz

2 years, 9 months ago

Selected Answer: A

A) "MX". Booth "MX" and "TXT" entries can be created to validate a custom domain. https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-domain#verify-your-custom-domain-name

upvoted 4 times

...

EmnCours

2 years, 10 months ago

Selected Answer: A

Correct Answer: A

upvoted 1 times

...

Load full discussion...