Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Exam AZ-104 topic 2 question 17 discussion

Actual exam question from Microsoft's AZ-104
Question #: 17
Topic #: 2
[All AZ-104 Questions]

You have an Azure Active Directory (Azure AD) tenant named contosocloud.onmicrosoft.com.
Your company has a public DNS zone for contoso.com.
You add contoso.com as a custom domain name to Azure AD.
You need to ensure that Azure can verify the domain name.
Which type of DNS record should you create?

  • A. MX
  • B. NSEC
  • C. PTR
  • D. RRSIG
Show Suggested Answer Hide Answer
Suggested Answer: A ūüó≥ÔłŹ
To verify your custom domain name (example)
1. Sign in to the Azure portal using a Global administrator account for the directory.
2. Select Azure Active Directory, and then select Custom domain names.
3. On the Fabrikam - Custom domain names page, select the custom domain name, Contoso.
4. On the Contoso page, select Verify to make sure your custom domain is properly registered and is valid for Azure AD. Use either the TXT or the MX record type.
There are several versions of this question in the exam. The question can have two correct answers:
1. MX
2. TXT
The question can also have other incorrect answer options, including the following:
1. SRV
2. NSEC3


Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Highly Voted 2 years, 5 months ago
TXT and MX are valid answers.
upvoted 83 times
Highly Voted 2 years, 1 month ago
So guys i will try to give an expiation to this question. When you add a custom domain in azure u are not allowed to use that unless u prove its your domain.So once u add the custom domain name azure asks u to verify and you have to provide some inputs to verify that its your these inputs can be provided in TXT or MX. So its MX in this case
upvoted 65 times
6 months, 3 weeks ago
Why would you update MX record? Its used for mail servers. The email delivery will stop working if you update MX records. TXT is always used for domain verification.
upvoted 6 times
1 year, 11 months ago
Thank you - the process is covered here where you can see either TXT or MX can be chosen: https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-domain
upvoted 14 times
1 year, 7 months ago
Hopefully they update the reference; its not valid. The reference above by JayBee65 is correct as there is no mention of MX in current reference.
upvoted 4 times
1 year, 6 months ago
I didn't know mx was there usually it is txt record ..thanks for this
upvoted 6 times
1 year, 1 month ago
same here. i thought mx is explicitly for mail exchange
upvoted 5 times
2 years ago
Thank you
upvoted 1 times
Most Recent 2 weeks, 2 days ago
WOW, the answer makes no sense. TXT must be listed as an option. It cannot be the answer just because it is on the same Azure portal page as a selection. Ridiculous!.
upvoted 1 times
1 month, 3 weeks ago
Option A is correct. When you add a custom domain name to Azure AD, you need to verify that you own the domain by creating a DNS record in your domain's DNS zone that points to Azure AD. In this case, you added contoso.com as a custom domain name to Azure AD, which means you need to create a DNS record in the DNS zone for contoso.com. The type of DNS record that you need to create is a TXT record, which contains a verification code that Azure AD provides. The TXT record should be created in the DNS zone for the domain name you added to Azure AD (in this case, contoso.com), and the value of the TXT record should be set to the verification code provided by Azure AD. Once you create the TXT record, Azure AD can verify that you own the domain name and you can start using it in Azure AD. Therefore, option A is correct as an MX record is used for mail exchange, NSEC and RRSIG records are used for DNSSEC validation, and a PTR record is used for reverse DNS lookups.
upvoted 2 times
3 months ago
Selected Answer: A
I took Exam of Azure- 104 at 27/2/2023 I score 920 points out of 1000 points. This was on it and my answer was : (A) MX
upvoted 5 times
3 months, 1 week ago
No, MX record is used to specify the mail server responsible for accepting email messages for the domain, it is not used to verify the domain for Azure AD. The correct answer is TXT record, which is used to verify the ownership of the domain. To verify the domain name in Azure AD, you need to create a DNS TXT record in your public DNS zone for contoso.com. The value of the record should be the domain verification code that you can get from the Azure portal. Therefore, the correct answer is not listed among the options given.
upvoted 1 times
5 months ago
Had this question on my Exam 28th Dec '22.
upvoted 3 times
5 months, 4 weeks ago
Had a similar question in my exam today 07 Dec 2022.
upvoted 2 times
8 months, 3 weeks ago
Selected Answer: A
A) "MX". Booth "MX" and "TXT" entries can be created to validate a custom domain. https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-domain#verify-your-custom-domain-name
upvoted 2 times
9 months, 1 week ago
Selected Answer: A
Correct Answer: A
upvoted 1 times
9 months, 2 weeks ago
Selected Answer: A
MX is the Answer
upvoted 1 times
11 months, 3 weeks ago
Selected Answer: A
A is correct either TXT and MX are correct but becareful if asked about App Services custom domain it is then A or CNAME record
upvoted 7 times
11 months, 4 weeks ago
Selected Answer: A
Correct answer is A. --> MX or TXT is valid.
upvoted 1 times
12 months ago
Selected Answer: A
A. MX is correct
upvoted 1 times
1 year ago
Selected Answer: A
I thought it was only TXT, but I just tested adding a custom domain in my portal and MX is an option - you live and learn
upvoted 1 times
1 year ago
TXT should be the only answer
upvoted 1 times
1 year ago
MX records are mail exchange. There is no mention of mail in this question.
upvoted 1 times
Community vote distribution
A (35%)
C (25%)
B (20%)
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

Loading ...