Administering Windows Server Hybrid Core Infrastructure (AZ-800) Practice

For internal and external clients to resolve names correctly, what must Contoso IT staff do?

1. Set up split-horizon DNS by creating two DNS zones in Azure—one private and one public, both with the same name.

2. Set up a single DNS zone that is both public and private.

3. Create multiple public DNS zones.

4. Create a private zone for external access.

The correct answer is: Set up split-horizon DNS by creating two DNS zones in Azure—one private and one public, both with the same name.

Setting up split-horizon DNS by creating two DNS zones in Azure—one private and one public, both with the same name—is essential for enabling internal and external clients to resolve names correctly. This approach allows organizations to maintain separate DNS records based on the client's location. When an internal user queries the DNS, the internal private zone can return specific internal IP addresses that are not exposed to the internet. Conversely, external clients querying the same domain name can be directed to the public DNS zone, providing them with the appropriate external IP addresses. This separation enhances security by controlling what internal resources are exposed and ensures that users always receive the correct addresses according to their access needs. The method effectively provides tailored responses for various client types, which is crucial in hybrid environments where both internal users and external clients need to access the same services but may require different routing based on security and operational considerations. This makes split-horizon DNS a practical solution for managing name resolution in a way that meets diverse operational requirements.