Question

Contoso runs several VNets in Azure that must resolve names hosted on an on-premises Active Directory DNS server (contoso.local) reachable over an ExpressRoute circuit. You deploy an Azure DNS Private Resolver. You need Azure workloads to forward only queries for contoso.local to the on-premises DNS servers while all other queries continue to use Azure-provided DNS. What should you configure?

Accepted Answer

Create an outbound endpoint, then create a DNS forwarding ruleset with a rule for contoso.local pointing to the on-premises DNS IPs, and link the ruleset to the VNets

Answer

Create an inbound endpoint and set the on-premises DNS server to conditionally forward contoso.local to the inbound endpoint IP

Answer

Create a private DNS zone named contoso.local, link it to the VNets with autoregistration, and add A records manually

Answer

Set the custom DNS servers on each VNet to the on-premises DNS server IP addresses