Designing and Implementing Microsoft DevOps Solutions (AZ-400) 2026 – 400 Free Practice Questions to Pass the Exam

When adding a public DNS zone for verification in Azure Active Directory (Azure AD), creating a TXT record is a necessary step. This is because Azure AD uses TXT records to verify domain ownership.

The process involves adding a specific TXT record that Azure AD provides during the domain verification process. This record serves as a proof that you have control over the domain you're trying to add to your directory. Once the TXT record is created and propagated in the DNS, Azure AD can check for the presence of this record, which confirms ownership of the domain.

TXT records are particularly useful for this purpose due to their simplicity and compatibility with various verification methods used by different services. In contrast, RRSIG, CNAME, and A records serve different purposes in DNS management and are not employed for the specific task of domain verification within Azure AD. RRSIG records are related to DNSSEC (Domain Name System Security Extensions), CNAME records are used for aliasing one domain name to another, and A records map a domain to an IP address. None of these would fulfill the requirement for domain verification like a TXT record does.