Exam MS-100 topic 4 question 48 discussion

The first question should be 1. Contoso is already verified and added, subdomains do not need verifying and adding so only fabrikam.com needs verifying. 3 CNAMEs are needed though for each domain.

The answer to the first part of the question is 1, not 3. "When you add a subdomain, it is automatically verified based on the parent domain that is being verified." - https://docs.microsoft.com/en-us/microsoft-365/admin/setup/domains-faq?view=o365-worldwide

It states "Contoso has a Microsoft 365 subscription that is configured to use the DNS domains shown in the following table" and therefore contoso.com has already been registered/configured. Therefore only root domain of fabrikam.com needs to be verified. The answer the first part of the question is 1. minimum number of enterpriseregistration DNS records you should add is 1. As contoso.com devices can already enrol, you have to make sure you can do the same for newly added Fabrikam.com . Now the question is asking about “enterpriseregistration DNS records” NOT EnterpriseEnrollement DNS records. There’s a difference between both. (refer to this link: https://techcommunity.microsoft.com/t5/intune-customer-success/which-cnames-to-use-for-auto-discovery-during-mdm-enrollment/ba-p/279952 ) It needs one record per company_domain, as contoso is already added and can be enrolled, we need to add Fabrikam.

1 & 3 Add subdomains of a custom domain If you want to add a subdomain name such as ‘europe.contoso.com’ to your organization, you should first add and verify the root domain, such as contoso.com. The subdomain is automatically verified by Azure AD.

3 Domains? If the company uses more than one UPN suffix, you need to create one CNAME for each domain name and point each one to EnterpriseEnrollment-s.manage.microsoft.com. For example, users at Contoso use the following formats as their email/UPN: [email protected] [email protected] [email protected]

Was in my exam today 05/08/22.

In the first box should be 3 (the answer is correct). The domain needs to be always verified ! The verification is a simple DNS record to MSFT know that you are owner of the domain. The subdomains are automatically verified, but that not mean you bypass the domain verfication! Seconde box is 3 also. All domains need a DNS record for registration device, even if its a sub domain.

Answer: 1, 3. If the company uses more than one UPN suffix, you need to create one CNAME for each domain name and point each one to EnterpriseEnrollment-s.manage.microsoft.com. For example, users at Contoso use the following formats as their email/UPN: [email protected] [email protected] [email protected]

The Answer should be 1 domain - Fabrikam and 3 Enterprise Registration DNS which are CNames: You need to ensure that the devices in the new domains can register by using Autodiscover. Type Host name Points to TTL CNAME EnterpriseEnrollment.fabrikam.com EnterpriseEnrollment-s.manage.microsoft.com 1 hour CNAME EnterpriseEnrollment.east.fabrikam.com EnterpriseEnrollment-s.manage.microsoft.com 1 hour CNAME EnterpriseEnrollment.west.contoso.com EnterpriseEnrollment-s.manage.microsoft.com 1 hour https://docs.microsoft.com/en-us/mem/intune/enrollment/windows-enroll#step-1-create-cname-optional

The number of domains should be 1 "If you want to add a subdomain name such as ‘europe.contoso.com’ to your organization, you should first add and verify the root domain, such as contoso.com. The subdomain is automatically verified by Azure AD. To see that the subdomain you added is verified, refresh the domain list in the browser." https://docs.microsoft.com/en-us/azure/active-directory/enterprise-users/domains-manage#:~:text=If%20you%20want%20to%20add%20a%20subdomain%20name%20such%20as%20%E2%80%98europe.contoso.com%E2%80%99%20to%20your%20organization%2C%20you%20should%20first%20add%20and%20verify%20the%20root%20domain%2C%20such%20as%20contoso.com.%20The%20subdomain%20is%20automatically%20verified%20by%20Azure%20AD.%20To%20see%20that%20the%20subdomain%20you%20added%20is%20verified%2C%20refresh%20the%20domain%20list%20in%20the%20browser.

Guys, It's 1 domain: fabrikam.com (contoso.com already verified, and any sub-domain doesn't require verification) Regarding the DNS Records the answer is 2: The autodiscover mentioned here is for enterprise registration , not Outlook Autodiscover. These are DNS records for mobile device management, which are 2 CNAME Records enterpriseregistration.domain.xxx point to enterpriseregistration.windows.net and enterpriseenrollment.domain.xx point to enterpriseenrollment.manage.microsoft.com

The second answer specifies EnterpriseRegistration DNS records not Autodiscover. So should answer bse 1 and 0? EnterpriseRegistration is used to redirect to intune so not for email.

1 domain 3 cnames

IMHO Answer 2 domains, 3 DNS records Already in place an verified • contoso.com • contoso.onmicrosoft.com New domains • west.contoso.com verified from contoso.com New adquisition Fabrikam Need to be verified • fabrikam.com no needed to verify east.fabrikam.com west.contoso.com When you add a subdomain, it is automatically verified based on the parent domain that is being verified. We recommend that you create an Autodiscover CNAME record for every domain on your account, including domain aliases and accepted domains. You need to create either a CNAME or SRV record where your domain is hosted. Only then you can synchronize your offline address book, show free/busy information and enable the Out of office feature in Outlook. • autodiscover.fabrikam.com • autodiscover.east.fabrikam.com • autodiscover.west.contoso.com

I agree with afbnfz. It states "Contoso has a Microsoft 365 subscription that is configured to use the DNS domains shown in the following table" and therefore contoso.com has already been registered/configured. Therefore only root domain of fabrikam.com needs to be verified. The answer the first part of the question is 1 and 3 x CNAMEs

You do not need to verify sub-domain and so you'll only need to verify fabrikam.com, for autodiscover though, each will need a CNAME.