AZ-802 · Networking · Networking | Implement on-premises and hybrid name resolution · Storage and file services · Storage and file services | Configure and manage Azure Files

Practice question 482 of 506 · hard

On-premises clients reach an Azure Files private endpoint through a VPN, but the storage hostname resolves to its public address. The private DNS zone is linked to an Azure VNet. What should you add to the hybrid DNS design?

Choose the single best answer.

A.Create a hosts-file entry for every client and treat it as an automatically maintained private-endpoint DNS service
B.Configure the on-premises DNS server to query Azure's 168.63.129.16 address directly over the VPN
C.Grant SMB Share Contributor and assume share authorization changes DNS responses
D.Forward the appropriate Azure service namespace from on-premises DNS to a resolver path that can resolve the linked private zone, such as an Azure DNS Private Resolver inbound endpoint

Show the answer and explanation

✓ Correct answer

Forward the appropriate Azure service namespace from on-premises DNS to a resolver path that can resolve the linked private zone, such as an Azure DNS Private Resolver inbound endpoint

A hybrid resolver path must connect on-premises queries to the Azure private-zone view. The Azure platform resolver address is not directly reachable as a general on-premises resolver. Hosts-file entries create manual lifecycle work. SMB authorization is independent of DNS resolution.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.