Azure DNS basics - Practice Problems & Coding Challenges

Challenge - 5 Problems

❓ service_behavior

intermediate

How does Azure DNS resolve domain names?

When a user types a domain name managed by Azure DNS, what happens behind the scenes to resolve the name to an IP address?

A Azure DNS responds directly with the IP address from its authoritative DNS zone records.

B Azure DNS queries the user's local DNS cache and returns the cached IP address.

C Azure DNS forwards the request to the domain registrar to get the IP address.

D Azure DNS redirects the request to a random Azure region to find the IP address.

💡 Hint

Think about what an authoritative DNS server does.

Azure DNS hosts authoritative DNS zones. When queried, it responds directly with the IP address from its stored DNS records without forwarding the request elsewhere.

❓ Configuration

intermediate

Which Azure resource is required to manage DNS zones?

To create and manage DNS zones in Azure, which resource must you create first?

A Azure Storage Account

B Azure Virtual Network

C Azure DNS Zone resource

D Azure App Service Plan

💡 Hint

Consider the resource that holds DNS records for a domain.

Azure DNS Zone is the resource that represents a DNS zone and contains DNS records for a domain.

❓ security

advanced

How to restrict who can update DNS records in Azure DNS?

You want to ensure only specific team members can update DNS records in your Azure DNS zone. What is the best way to enforce this?

A Enable Azure Firewall to filter DNS update requests.

B Assign Azure Role-Based Access Control (RBAC) roles scoped to the DNS zone resource.

C Use network security groups to block access to the DNS zone.

D Create a separate Azure subscription for DNS management.

💡 Hint

Think about Azure's built-in permission management system.

Azure RBAC allows you to assign permissions to users or groups scoped to specific resources like DNS zones, controlling who can update records.

❓ Architecture

advanced

What is the benefit of using Azure DNS private zones?

Why would you use Azure DNS private zones instead of public DNS zones?

A To manage DNS records accessible only within your Azure virtual networks.

B To make your DNS records publicly available on the internet.

C To automatically replicate DNS zones across all Azure regions.

D To enable DNS over HTTPS for all your domains.

💡 Hint

Consider internal network name resolution needs.

Azure DNS private zones allow you to create DNS zones that are only visible and resolvable within your Azure virtual networks, enhancing security and isolation.

✅ Best Practice

expert

What is the recommended way to ensure high availability of DNS resolution in Azure?

You want to design your DNS setup in Azure to avoid downtime and ensure fast resolution globally. Which approach follows best practices?

A Use Azure DNS with multiple DNS zones for the same domain in different subscriptions.

B Manually update DNS records daily to balance load across regions.

C Use a single Azure DNS zone and rely on local DNS caching only.

D Use Azure DNS public zones with Azure Traffic Manager to route traffic based on health and geography.

💡 Hint

Think about combining DNS with traffic routing services.

Azure Traffic Manager works with Azure DNS to route user requests to the healthiest and closest endpoints, improving availability and performance globally.