AZ-900 Describe Azure architecture and services Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Azure Traffic Manager

  Why it's wrong here

  Azure Traffic Manager is a DNS-based traffic balancing service that routes incoming requests to healthy endpoints based on routing methods like priority, weighted, or geographic. However, it does not provide a place to host your DNS zones or manage arbitrary DNS record types such as MX, TXT, or CNAME records. Traffic Manager merely responds to DNS queries for a specific DNS name with a chosen endpoint, rather than acting as an authoritative DNS provider for an entire domain. Thus, it is not the correct service for hosting DNS zones.

• ✗

  Azure Front Door

  Why it's wrong here

  Azure Front Door is a global, scalable entry point that uses the Microsoft edge network to accelerate and route HTTP/HTTPS traffic, and it includes capabilities like SSL offload and web application firewall. It can use custom domains and perform DNS-based routing, but it doesn't offer a full DNS hosting control plane where you can manage zone files and record sets. Its DNS involvement is limited to resolving the front door hostname to backend origins. Therefore, while it is a network routing service, it is not the service that hosts DNS zones and records.

• ✓

  Azure DNS

  Why this is correct

  Azure DNS is the correct answer because it is a cloud-based DNS hosting service that allows you to manage your DNS zones and records through Azure. It provides authoritative name resolution using Azure's global anycast network, ensuring low-latency responses from anywhere in the world. You can host public and private DNS zones, and it integrates with other Azure services for automated record management. This directly matches the requirement to host DNS zones and resolve domain names.

• ✗

  Azure Private Link

  Why it's wrong here

  Azure Private Link is designed to provide secure, private connectivity from a virtual network to Azure PaaS services via private endpoints within a VNet. It does not host DNS zones or offer the global name resolution needed for domain management. Name resolution through Private Link is tied to private IP addresses and is not the same as authoritative DNS hosting. Therefore, while it deals with networking, it is not the correct service for hosting and resolving DNS domains.