assigned a default domain of whizlabs.onmicorosft.com. You want to use your own custom domain of whizlabs.com. You added the custom domain via the Azure portal and now you have to validate that you…

Question

Options

• ATXT record
• BA record
• CCNAME record
• DCAA record

• A
  90% (26)
• B
  7% (2)
• D
  3% (1)

Explanation

Custom Domain Validation in Azure AD

Adding a custom domain to Azure Active Directory (now Entra ID) requires DNS ownership verification, which is done by adding a TXT record to your domain registrar. Azure provides a specific TXT value that you must publish in your DNS zone; once Azure detects this record, it confirms you control the domain and completes validation.

• Option B (A record) is wrong because A records map a hostname to an IPv4 address - they are not used for domain ownership verification.
• Option C (CNAME record) is a valid alternative in some scenarios (e.g., subdomain verification), but for root/apex domain verification in Azure AD, the TXT record is the primary and required method.
• Option D (CAA record) is wrong because CAA records specify which Certificate Authorities are allowed to issue SSL certificates - completely unrelated to domain ownership in Azure AD.

Memory Tip: Think TXT = "TeXt proof of ownership" - whenever a cloud service (Azure, Microsoft 365, Google Workspace) asks you to prove you own a domain, your first thought should always be TXT record. It's the universal "I own this domain" signal.

No community discussion yet for this question.