ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam AZ-104 All Questions

View all questions & answers for the AZ-104 exam
Go to Exam

Exam AZ-104 topic 2 question 17 discussion

Actual exam question from Microsoft's AZ-104
Question #: 17
Topic #: 2
[All AZ-104 Questions]

You have an Azure Active Directory (Azure AD) tenant named contosocloud.onmicrosoft.com.
Your company has a public DNS zone for contoso.com.
You add contoso.com as a custom domain name to Azure AD.
You need to ensure that Azure can verify the domain name.
Which type of DNS record should you create?

  • A. MX
  • B. NSEC
  • C. PTR
  • D. RRSIG
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by silvervlad at Dec. 1, 2020, 4:23 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
ms70743
Highly Voted 4 years, 2 months ago
TXT and MX are valid answers.
upvoted 106 times
...
sidharthwader
Highly Voted 3 years, 10 months ago
So guys i will try to give an expiation to this question. When you add a custom domain in azure u are not allowed to use that unless u prove its your domain.So once u add the custom domain name azure asks u to verify and you have to provide some inputs to verify that its your these inputs can be provided in TXT or MX. So its MX in this case
upvoted 83 times
e_karma
3 years, 3 months ago
I didn't know mx was there usually it is txt record ..thanks for this
upvoted 7 times
sairaj9396
2 years, 10 months ago
same here. i thought mx is explicitly for mail exchange
upvoted 7 times
Howard20717
10 months, 2 weeks ago
yea, me too. Never use MX record for this purpose
upvoted 1 times
...
...
...
Amrinder101
2 years, 3 months ago
Why would you update MX record? Its used for mail servers. The email delivery will stop working if you update MX records. TXT is always used for domain verification.
upvoted 9 times
jackill
1 year, 7 months ago
Although the reference provided (https://docs.microsoft.com/en-us/azure/dns/dns-web-sites-custom-domain) do not mention MX record, my understanding is that both TXT and MX can be used to perform the validation step. The TXT/MX record added is needed only for the verification step (to assure that you are the owner of the domain), after that it can be removed. The similar document for Microsoft 365 clarifies this: https://learn.microsoft.com/en-us/microsoft-365/admin/get-help-with-domains/create-dns-records-at-any-dns-hosting-provider?view=o365-worldwide#verify-with-an-mx-record It also clarify that you can add this verification MX record with an high priority number to avoid the record to be effectively used to forward emails: “This MX record's Priority must be the highest of all existing MX records for the domain. Otherwise, it can interfere with sending and receiving email. You should delete this records as soon as domain verification is complete.” I suppose that the usage of MX record was introduced due to some restriction on the handling of TXT records by some DNS registrars, but I do not have found direct evidence for this.
upvoted 3 times
...
...
JayBee65
3 years, 8 months ago
Thank you - the process is covered here where you can see either TXT or MX can be chosen: https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-domain
upvoted 17 times
Lamini
3 years, 4 months ago
Hopefully they update the reference; its not valid. The reference above by JayBee65 is correct as there is no mention of MX in current reference.
upvoted 4 times
...
...
...
Mark74
Most Recent 3 months ago
Selected Answer: A
Mx record for me is correct
upvoted 1 times
...
[Removed]
6 months ago
Selected Answer: A
A is corerct
upvoted 1 times
...
Amir1909
1 year ago
A is correct
upvoted 1 times
...
DWILK
1 year, 4 months ago
Why would a Mail Exchange record have to be created? Mail isn't mentioned in the question. This has to be wrong
upvoted 3 times
...
nmnm22
1 year, 5 months ago
if this list had the Cname record option, would we still need to pick "MX" as an answer? can someone explain why, please?
upvoted 1 times
...
abrar_jahat
1 year, 6 months ago
Selected Answer: A
upvoted 2 times
...
itguyeu
1 year, 8 months ago
I used free version access for this site and it helped me pass the exam. Some questions that I had on the exams, I took the exam more than once, are not available under the free tier access, but 80% of the questions came from here. I do recommend investing a bit of money and getting full access to this site. I didn't memorise answers but analysed them and studied as Microsoft does tweak them a bit. This Q was on the exam and answer is correct.
upvoted 1 times
...
TonySuccess
1 year, 8 months ago
Selected Answer: A
Of the available options this is MX (A)
upvoted 1 times
...
Madbo
1 year, 10 months ago
Option A is correct. When you add a custom domain name to Azure AD, you need to verify that you own the domain by creating a DNS record in your domain's DNS zone that points to Azure AD. In this case, you added contoso.com as a custom domain name to Azure AD, which means you need to create a DNS record in the DNS zone for contoso.com. The type of DNS record that you need to create is a TXT record, which contains a verification code that Azure AD provides. The TXT record should be created in the DNS zone for the domain name you added to Azure AD (in this case, contoso.com), and the value of the TXT record should be set to the verification code provided by Azure AD. Once you create the TXT record, Azure AD can verify that you own the domain name and you can start using it in Azure AD. Therefore, option A is correct as an MX record is used for mail exchange, NSEC and RRSIG records are used for DNSSEC validation, and a PTR record is used for reverse DNS lookups.
upvoted 3 times
...
kklohit
2 years ago
No, MX record is used to specify the mail server responsible for accepting email messages for the domain, it is not used to verify the domain for Azure AD. The correct answer is TXT record, which is used to verify the ownership of the domain. To verify the domain name in Azure AD, you need to create a DNS TXT record in your public DNS zone for contoso.com. The value of the record should be the domain verification code that you can get from the Azure portal. Therefore, the correct answer is not listed among the options given.
upvoted 2 times
...
NaoVaz
2 years, 5 months ago
Selected Answer: A
A) "MX". Booth "MX" and "TXT" entries can be created to validate a custom domain. https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-domain#verify-your-custom-domain-name
upvoted 4 times
...
EmnCours
2 years, 6 months ago
Selected Answer: A
Correct Answer: A
upvoted 1 times
...
libran
2 years, 6 months ago
Selected Answer: A
MX is the Answer
upvoted 1 times
...
Lazylinux
2 years, 8 months ago
Selected Answer: A
A is correct either TXT and MX are correct but becareful if asked about App Services custom domain it is then A or CNAME record
upvoted 7 times
...
Sillyon
2 years, 8 months ago
Selected Answer: A
Correct answer is A. --> MX or TXT is valid.
upvoted 1 times
...
Load full discussion...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago