nerdexam
Microsoft

AZ-305 · Question #415

You have an on-premises datacenter named Site1 that contains multiple servers. You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains multiple virtual machines…

The correct answer is C. Private DNS resolver. DNS Private Resolver is a service that bridges an on-premises DNS with Azure DNS. You can use this service to query Azure DNS private zones from an on-premises environment and vice versa without deploying VM-based DNS servers…

Submitted by eva_at· Mar 6, 2026Design infrastructure solutions

Question

You have an on-premises datacenter named Site1 that contains multiple servers. You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains multiple virtual machines. VNet1 uses the default Azure DNS service. Site1 connects to VNet1 by using a Site-to-Site (S2S) VPN. You need to recommend a DNS solution that will forward DNS queries from the virtual machines that target the on-premises DNS namespace to the on-premises DNS servers. The solution must minimize administrative effort and costs. What should you include in the recommendation?

Options

  • AAzure Firewall DNS Proxy
  • Ban Azure virtual machine that runs the DNS service
  • CPrivate DNS resolver
  • DPrivate DNS zone

How the community answered

(26 responses)
  • A
    8% (2)
  • B
    4% (1)
  • C
    85% (22)
  • D
    4% (1)

Explanation

DNS Private Resolver is a service that bridges an on-premises DNS with Azure DNS. You can use this service to query Azure DNS private zones from an on-premises environment and vice versa without deploying VM-based DNS servers. https://learn.microsoft.com/en-us/azure/architecture/networking/architecture/azure-dns-private-

Topics

#Private DNS Resolver#DNS forwarding#hybrid networking#VPN connectivity

Community Discussion

No community discussion yet for this question.

Full AZ-305 Practice