Hotspot Question You have the Azure resources shown in the following table. You need to design a solution that provides on-premises network connectivity to SQLDB1 through PE1. How should you configure

Question

Exhibits

Answer Area

• Configure VM1 to forward contoso.com to the public DNS zoneNo
• Configure VM1 to forward contoso.com to the Azure-provisioned DNS at 168.63.129.16Yes
• In VNet1, configure a custom DNS server set to the Azure provided DNS at 168.63.129.16No
• Forward contoso.com to VM1Yes
• Forward contoso.com to the public DNS zoneNo
• Forward contoso.com to the Azure-provisioned DNS at 168.63.129.16No

Explanation

For on-premises connectivity to a Private Endpoint, DNS resolution must route private endpoint queries through Azure's private DNS infrastructure. The correct architecture requires a DNS forwarder VM (VM1) in Azure that forwards the private zone domain (contoso.com or the privatelink zone) to Azure's magic IP 168.63.129.16, which can resolve Private DNS Zone records - on-premises resolvers cannot reach 168.63.129.16 directly. On-premises DNS must then forward the relevant domain to VM1 (the conditional forwarder in Azure), completing the resolution chain: on-premises → VM1 → 168.63.129.16 → Private DNS Zone → PE1's private IP.

No community discussion yet for this question.