Question

Contoso hosts an internal web API at api.contoso.com on Azure VMs in a VNet. The public DNS zone contoso.com resolves api.contoso.com to a public IP for external partners. Internal VMs must instead resolve api.contoso.com to the private IP of the internal load balancer, without changing the public record. What should you implement?

Accepted Answer

Create a private DNS zone named contoso.com, add an A record for api pointing to the internal load balancer's private IP, and link the zone to the VNet.

Answer

Add a conditional forwarder on the VMs pointing api.contoso.com to Azure DNS at 168.63.129.16.

Answer

Create a private DNS zone named api.contoso.com and enable auto-registration on the VNet link.

Answer

Add the internal load balancer's private IP as a custom DNS server in the VNet's DNS settings.