AZ-104 Certification Practice Question #53

Question

You have an Azure Active Directory (Azure AD) tenant named contosocloud.onmicrosoft.com.
Your company has a public DNS zone for contoso.com.
You add contoso.com as a custom domain name to Azure AD.
You need to ensure that Azure can verify the domain name.
Which type of DNS record should you create?

Accepted Answer

To verify a custom domain in Microsoft Entra ID (formerly Azure Active Directory), you must prove ownership of the domain by creating either a TXT record or an MX record in the domain's public DNS zone. Because a TXT record is not offered as one of the options in this question, the MX record (Option A) is the correct and only viable choice. NSEC, PTR, and RRSIG records cannot be used for Entra custom domain validation.

More AZ-104 practice questions