AZ-700 Question 32
Select 2You are designing the public DNS solution for a company that owns the registered domain contoso.com with a third-party registrar. They plan to migrate all DNS records, including the apex record (contoso.com), from their existing provider into Azure DNS for centralized management. You have created a public DNS zone named contoso.com in Azure DNS. Which steps should you perform to make Azure DNS authoritative for the domain while minimizing service disruption? (Choose two.)
- A
Update the domain registrar� NS records to reference the name servers assigned by Azure DNS.
- B
Change your public DNS zone in Azure to a private DNS zone and use Azure-provided IP addresses as name servers.
- C
Import or recreate the existing DNS records (e.g., A, CNAME, MX) into the new Azure DNS zone.
- D
Remove all NS records from the Azure DNS zone to allow the external registrar to control name resolution.
Show answer and explanation
Correct answers: A, C
Explanation
To host the DNS records for a publicly registered domain in Azure DNS, you create a public DNS zone matching the domain name. Then you import or manually enter all the necessary DNS records into that zone to ensure continuity of services (web, email, etc.). Finally, you update the domain registrar to reference the Azure DNS name servers. Once the registrar updates propagate, Azure DNS becomes authoritative. For more information, refer to the official Microsoft documentation on creating and managing public DNS zones in Azure: https://learn.microsoft.com/azure/dns/dns-getstarted-public-dns.
- A. Correct.
CORRECT � You must point the domain registrar� NS records to the name servers provided by Azure DNS. This is the critical step that tells the public internet to query Azure DNS for all DNS lookups associated with contoso.com.
- B. Incorrect.
INCORRECT � You need a public DNS zone for a publicly accessible domain. Changing it to a private DNS zone would prevent external clients on the internet from resolving the domain name properly.
- C. Correct.
CORRECT � Migrating or recreating all necessary DNS records into Azure DNS ensures continuity. If you do not transfer records, critical DNS lookups (like www or mail) will fail once the registrar points to Azure DNS.
- D. Incorrect.
INCORRECT � The default NS records in Azure DNS must remain intact. Removing them would break the delegation process. You only remove or update NS records at the external registrar, not from the Azure public DNS zone.