Your company has a public website hosted in Azure with a custom domain name. The domain name is registered with a third-party registrar. You have created an Azure Public DNS zone and added the necessary records. You need to ensure that internet clients can resolve the custom domain name to the Azure-hosted website. What should you do?

Configure the registrar's name servers to point to the Azure DNS name servers assigned to your zone.

Create a conditional forwarder on your on-premises DNS servers to Azure DNS for the custom domain.

Create a secondary zone in Azure DNS and set the master to your on-premises DNS server.

Add a CNAME record in your on-premises DNS zone pointing to the Azure website.

What is the purpose of integrating Windows Server DNS with Azure Public DNS?

To provide DNS resolution for private IP addresses within a virtual network

To replace the need for a local DNS server entirely

To automatically replicate on-premises DNS zones to Azure

To provide global DNS resolution for public-facing services using Azure's anycast network

Your organization's security team requires that DNS responses for the zone corp.contoso.com be protected against tampering. You have enabled DNSSEC on the zone. You need to ensure that validating resolvers can verify the authenticity of the zone's DNSKEY records. What should you do?

Publish the DS record for corp.contoso.com in the parent zone.

Enable DNS socket pool on the DNS server.

Add a trust anchor manually to every validating resolver.

Configure the zone to use NSEC3 instead of NSEC.

A company wants to ensure that DNS responses for their domain 'contoso.com' cannot be tampered with in transit. They have Windows Server DNS servers. What should you implement?

DNSSEC signing on the contoso.com zone.

DNS policies to restrict queries.

DNS socket pool and cache locking.

A conditional forwarder to a secure DNS provider.

You have an Azure virtual network with several VMs that need to resolve each other's names using custom DNS names. You have created an Azure Private DNS zone named internal.contoso.com and linked it to the VNet. You have also configured the VNet to use a custom DNS server (a Windows Server VM) instead of Azure-provided DNS. What must you do to ensure the VMs can resolve names in the private zone?

Add A records for each VM directly in the custom DNS server's zone.

Change the VNet's DNS servers back to Azure-provided DNS.

Create a secondary zone for internal.contoso.com on the custom DNS server.

Configure the custom DNS server to forward queries for internal.contoso.com to Azure DNS (168.63.129.16).

Microsoft Certified:Windows Server Hybrid Administrator Associate

Domain 4Objective 1

Implement On-Premises and Hybrid Name Resolution AZ-800 Practice Questions (Page 1)

Part of the Implement and manage an on-premises and hybrid networking infrastructure domain, which accounts for 15–20% of the AZ-800 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~6–13 in this domain), expect 2–4 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

10concepts

15–20%of the exam

Questions 1–5

1application · medium
Your company has a public website hosted in Azure with a custom domain name. The domain name is registered with a third-party registrar. You have created an Azure Public DNS zone and added the necessary records. You need to ensure that internet clients can resolve the custom domain name to the Azure-hosted website. What should you do?
Select an answer first
2foundation · easy
What is the purpose of integrating Windows Server DNS with Azure Public DNS?
Select an answer first
3application · medium
Your organization's security team requires that DNS responses for the zone corp.contoso.com be protected against tampering. You have enabled DNSSEC on the zone. You need to ensure that validating resolvers can verify the authenticity of the zone's DNSKEY records. What should you do?
Select an answer first
4application · medium
A company wants to ensure that DNS responses for their domain 'contoso.com' cannot be tampered with in transit. They have Windows Server DNS servers. What should you implement?
Select an answer first
5application · medium
You have an Azure virtual network with several VMs that need to resolve each other's names using custom DNS names. You have created an Azure Private DNS zone named internal.contoso.com and linked it to the VNet. You have also configured the VNet to use a custom DNS server (a Windows Server VM) instead of Azure-provided DNS. What must you do to ensure the VMs can resolve names in the private zone?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-800

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-800” is a trademark of its owner, used for identification only.

Implement On-Premises and Hybrid Name Resolution AZ-800 Practice Questions (Page 1)

Questions 1–5

What is the purpose of integrating Windows Server DNS with Azure Public DNS?

Your organization's security team requires that DNS responses for the zone corp.contoso.com be protected against tampering. You have enabled DNSSEC on the zone. You need to ensure that validating resolvers can verify the authenticity of the zone's DNSKEY records. What should you do?

A company wants to ensure that DNS responses for their domain 'contoso.com' cannot be tampered with in transit. They have Windows Server DNS servers. What should you implement?

Keep studying — Implement and manage an on-premises and hybrid networking infrastructure