Examkin

Question

Difficulty: MediumConfigure Azure DNS Private and Public Zones

An administrator configures an Azure Private DNS zone named corp.adatum.com. The environment contains two virtual networks named VNet-App and VNet-DB that are connected via virtual network peering. The corp.adatum.com zone has a virtual network link to VNet-DB with auto-registration enabled. A virtual machine named VM-DB1 is deployed in VNet-DB and is registered in the zone. A virtual machine named VM-App1 is deployed in VNet-App. From VM-App1, attempts to resolve the name vm-db1.corp.adatum.com fail, although network traffic can flow between the virtual machines. What should the administrator do to resolve the name resolution issue?

  1. A
    Configure the virtual network peering to use gateway transit.
  2. Link the VNet-App virtual network to the corp.adatum.com Private DNS zone.Answer
  3. C
    Configure the DNS servers setting of VNet-App to point to the IP address of VM-DB1.
  4. D
    Configure a DNS service endpoint on the subnet of VNet-App.

Answer

Link the VNet-App virtual network to the corp.adatum.com Private DNS zone.
To resolve domain names in an Azure Private DNS zone, the virtual network containing the client must have a virtual network link to the DNS zone. Peering alone does not propagate private DNS resolution. Therefore, linking the application virtual network to the private DNS zone is required to allow name resolution.

Step-by-Step Solution

1
Identify that VM-App1 is located in VNet-App, which currently lacks a virtual network link to the Private DNS zone corp.adatum.com.
Confirming the reason why VM-App1 cannot resolve names in the private DNS zone, despite peering being established.
Azure Private DNS resolution requires a direct virtual network link for any network that needs to resolve records within that private zone.
2
Configure a new virtual network link in the corp.adatum.com Private DNS zone.
A virtual network link is established pointing to VNet-App.
This link allows the Azure DNS resolver in VNet-App to query the records in corp.adatum.com.
3
Verify name resolution from VM-App1.
VM-App1 successfully resolves vm-db1.corp.adatum.com to its private IP address.
The newly created link enables VM-App1 to access the zone records.

Key Concept

Azure Private DNS Virtual Network Link
Estimated Time:1m 30s
Rate this question

Topics

Configure Azure DNS Private and Public Zones

More questions from this topic