AZ-305 Design infrastructure solutions Practice Question
Which TWO Azure services can be used to provide a fully managed DNS solution that supports custom domains and DNSSEC?
⚠ Common exam trap
Candidates often mistake Azure Front Door or Traffic Manager for DNS hosting services because they use DNS-based routing, but neither provides full DNS zone management or DNSSEC support. The real trap is recognizing that only Azure DNS is a managed DNS hosting service among these options.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Azure DNS
Azure DNS is a fully managed DNS hosting service that provides name resolution using Microsoft Azure infrastructure and supports custom domains via DNS zone delegation. Azure DNS DNSSEC support is currently limited (preview/not generally available for all scenarios). However, the stem asks for TWO services, and only Azure DNS among the listed options is a full DNS hosting solution. Azure Front Door and Traffic Manager provide DNS-based traffic routing but are not DNS hosting services and do not support DNSSEC zone management. Azure App Service and Azure Public IP addresses do not provide DNS hosting. Because only one option satisfies the criteria, the question as written is invalid and should be reworded to ask for a single service.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Azure Front Door
Why it's wrong here
Incorrect. Azure Front Door is a global load balancer and application delivery controller that uses DNS for routing, but it is not a fully managed DNS hosting service. It does not support custom DNS zone management or DNSSEC.
- ✓
Azure DNS
Why this is correct
Correct. Azure DNS is a fully managed DNS service that supports custom domains (via DNS zone delegation) and DNSSEC, providing secure and authoritative name resolution.
- ✗
Azure Traffic Manager
Why it's wrong here
Incorrect. Azure Traffic Manager is a DNS-based traffic load balancer that routes incoming traffic based on traffic routing methods, but it is not a full DNS hosting service and does not support custom DNS zones or DNSSEC.
- ✗
Azure App Service
Why it's wrong here
Incorrect. Azure App Service is a platform for hosting web applications; it does not provide DNS hosting or DNSSEC capabilities. Custom domains can be configured but require an external DNS provider.
- ✗
Azure Public IP address
Why it's wrong here
Incorrect. An Azure Public IP address is a resource that provides a public IPv4 or IPv6 address; it does not provide DNS hosting or DNSSEC.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every AZ-305 question from scratch — 795 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-305 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-305 exam.