An Azure application VM can ping an on-premises DC over VPN but cannot join the domain. It uses Azure-provided DNS. Which change targets the likely cause?

Choose the single best answer.

A.Place the domain controller behind a load balancer for DC discovery
B.Transfer the PDC emulator into Azure
C.Add a public IP to the domain controller
D.Configure reachable AD DNS private addresses for the workload VNet and refresh the VM DNS configuration

Show the answer and explanation

✓ Correct answer

Configure reachable AD DNS private addresses for the workload VNet and refresh the VM DNS configuration

AD DNS resolves the SRV records needed for domain discovery. A public IP does not fix private DNS, a load balancer is not the AD DC Locator mechanism, and moving the PDC role does not populate the client's DNS service records.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.