Soru

Zorluk: OrtaConfigure Azure DNS Private and Public Zones

An organization has a virtual network named `VNet-A` and a peered virtual network named `VNet-B`. To facilitate internal name resolution of resources, a private DNS zone named `corp.internal` has been created. The virtual machines in `VNet-A` require their DNS records to be updated automatically when they are provisioned or deleted. Virtual machines in `VNet-B` must be able to resolve names within `corp.internal`, but their records must not be automatically added to the zone. Which two configuration steps are required to achieve this goal? (Select two.)

  1. Link the `corp.internal` private DNS zone to `VNet-A` with the auto-registration option enabled.Cevap
  2. Link the `corp.internal` private DNS zone to `VNet-B` with the auto-registration option disabled.Cevap
  3. C
    Link the `corp.internal` private DNS zone only to `VNet-A` and configure virtual network peering transit settings to allow DNS resolution for `VNet-B`.
  4. D
    Configure the custom DNS servers setting on `VNet-B` to point to the IP address of the virtual network link created for `VNet-A`.

Cevap

Link the private DNS zone to the first virtual network with auto-registration enabled, and link the private DNS zone to the second virtual network with auto-registration disabled.
To satisfy the requirements, the private DNS zone must be linked to both virtual networks because name resolution is not transitive across peered networks. Enabling auto-registration on the link to the first virtual network allows automated lifecycle tracking of its VM hostnames. Leaving auto-registration disabled on the link to the second virtual network allows name resolution from that network without registering its VM records in the zone.

Adım Adım Çözüm

1
Analyze the requirements for the first virtual network.
The first virtual network requires both name resolution and automatic registration of its virtual machines' hostnames.
This necessitates creating a virtual network link from the private DNS zone to the first virtual network with the auto-registration checkbox enabled.
2
Analyze the requirements for the second virtual network.
The second virtual network requires name resolution only, without automatic registration.
This requires creating a virtual network link from the private DNS zone to the second virtual network with the auto-registration checkbox disabled.
3
Evaluate the role of virtual network peering in private DNS resolution.
Peering does not automatically share or forward DNS resolution capabilities of linked zones to unlinked networks.
Each virtual network must have its own link to the private DNS zone to perform name resolution.

Anahtar Kavram

Azure Private DNS Zone virtual network links and auto-registration behavior
Bu soruyu puanla