The answer is a TXT record. This is correct because Microsoft 365 uses the Domain Verification System (DVS), which requires you to add a specific TXT record containing a unique verification string to your public DNS zone; when Microsoft queries your DNS and finds that exact string, it proves you control the domain’s DNS settings, thereby confirming ownership. On the MS-102 exam, this concept tests your understanding of the initial domain onboarding workflow, and a common trap is confusing the TXT verification record with an MX record used for mail routing or a CNAME used for autodiscover—remember that only a TXT record is used for proof of control, not for service configuration. A helpful memory tip is “TXT for Trust,” since the TXT record acts as a cryptographic handshake between your DNS and Microsoft’s verification service.
MS-102 Deploy and manage a Microsoft 365 tenant Practice Question
This MS-102 practice question tests your understanding of deploy and manage a microsoft 365 tenant. Read the scenario carefully and evaluate each option against the stated constraints before committing to an answer. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
An organization has just purchased Microsoft 365 subscriptions and wants to add their custom domain 'fabrikam.com' to the tenant. Which record must they add to their DNS provider to verify domain ownership?
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
TXT record
To verify domain ownership in Microsoft 365, you must add a TXT record provided by the Microsoft 365 admin center to your DNS hosting provider. This TXT record contains a unique verification string that Microsoft checks to confirm you control the domain. MX, CNAME, and SRV records are used for mail routing, service aliasing, and service location, respectively, but they do not serve the purpose of domain ownership verification.
Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
✗
MX record
Why it's wrong here
MX records are used for mail routing and are not used for domain ownership verification.
✓
TXT record
Why this is correct
A TXT record containing a verification token provided by Microsoft is the standard method to prove domain ownership.
Related concept
Read the scenario before looking for a memorised answer.
✗
CNAME record
Why it's wrong here
CNAME records are used to alias one domain to another and are not used for verification.
✗
SRV record
Why it's wrong here
SRV records specify services (like SIP or LDAP) and are not part of domain verification in Microsoft 365.
Common exam traps
Common exam trap: answer the scenario, not the keyword
The trap here is that candidates often confuse the TXT record used for verification with the MX record required for email routing, mistakenly thinking they can skip verification by adding an MX record directly.
Detailed technical explanation
How to think about this question
Domain verification in Microsoft 365 relies on the DNS TXT record with a specific value (e.g., 'MS=msXXXXXXXX') that Microsoft queries via standard DNS resolution. This process is defined in RFC 1035 for TXT records and is a one-time step; once verified, you can add other DNS records (like MX, CNAME) for services. A common subtlety is that the TXT record must be added exactly as provided, including case sensitivity, and propagation can take up to 72 hours, though it often completes within minutes.
KKey Concepts to Remember
Read the scenario before looking for a memorised answer.
Find the constraint that changes the correct option.
Eliminate answers that are true in general but not in this case.
TExam Day Tips
→Watch for words such as best, first, most likely and least administrative effort.
→Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Real-world example
How this comes up in practice
A cloud solutions architect for a retail company is evaluating services for a new workload. The correct answer here reflects best practice for the specific scenario described — not a general cloud recommendation. Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option. Cloud exam questions reward reading the constraint carefully: the same technology can be right or wrong depending on the use case.
Related glossary terms
Concepts from this question explained
These glossary pages explain the core terms tested in this MS-102 question in full detail.
Deploy and manage a Microsoft 365 tenant — This question tests Deploy and manage a Microsoft 365 tenant — Read the scenario before looking for a memorised answer..
What is the correct answer to this question?
The correct answer is: TXT record — To verify domain ownership in Microsoft 365, you must add a TXT record provided by the Microsoft 365 admin center to your DNS hosting provider. This TXT record contains a unique verification string that Microsoft checks to confirm you control the domain. MX, CNAME, and SRV records are used for mail routing, service aliasing, and service location, respectively, but they do not serve the purpose of domain ownership verification.
What should I do if I get this MS-102 question wrong?
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
What is the key concept behind this question?
Read the scenario before looking for a memorised answer.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
This MS-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-102 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.