MSDEVBUILD / azure

Azure DNS

Internet Office VNet 10.0.0.0/16 web subnet data subnet ✓NSG LOAD BAL. VNet 2 🗄️Storage (PaaS) Azure DNS Azure DNS turns names like shop.contoso.com into IP addresses
Azure DNS is the internet’s contacts app: type a name, get the number (IP address).

😟 THE PROBLEM

DNS records are spread across many registrars and changes are slow and risky.

😊 THE SOLUTION

Host DNS zones in Azure DNS with Azure tools, access control and locks.

  • Records scattered everywhere✓ One place for all zones
  • Accidental record deletion✓ Resource locks and RBAC
  • Private names inside networks✓ Private DNS zones
🛠️ Solved with: Azure DNS
Module 2: Architecture & Services ⏱ 5 min read Updated 11 Nov 2026

Quick answer

Azure DNS is a hosting service for DNS domains that provides name resolution using Microsoft's global infrastructure. It turns names like shop.contoso.com into IP addresses. You manage DNS records with the same tools, access control and billing as your other Azure resources. You cannot buy a domain name through Azure DNS itself.

Exam objective: 2.2.5 Describe virtual networking, including the purpose of Azure virtual networks, subnets, peering, Azure DNS, Azure VPN Gateway, and ExpressRoute. (Skills measured as of July 20, 2026)

Start with a question

How does your browser know where shop.contoso.com lives?

It asks DNS, the internet’s phone book. Azure DNS can be that phone book for your domains.

Explain it like I’m 10

The technical explanation

Azure DNS hosts DNS zones containing records such as A (IPv4), AAAA (IPv6), CNAME (alias name), MX (mail) and TXT. It uses a global network of name servers with anycast routing for fast, reliable answers. Private DNS zones provide name resolution inside VNets, and alias records point straight at Azure resources such as public IPs or Front Door.

Real-world business scenario

Enterprise

A marketing agency

The problem
Client DNS records were spread across several registrars, and changes were slow and error-prone.
What they used
Moved DNS zones to Azure DNS, with RBAC per client and resource locks on production zones.
Why that choice
One place, one set of tools, with access control and audit logs.
The result
DNS changes became quick and auditable, and accidental deletions stopped.

When to use it and when not to

✓ Use it when…

  • Hosting public DNS for domains you own.
  • Private name resolution inside VNets.

✕ Think twice when…

  • Buying new domain names (use a registrar).
Ready for more?The full lesson adds the technical explanation, when to use it, interview questions and revision notes.

Interview preparation

Say your answer out loud first, then open the model answer. Interviewers care more about your reasoning than the exact words.

Beginner What does Azure DNS do?

Model answer

It hosts my domain's DNS records on Azure, so when someone types my website name, Azure DNS answers with the right IP address.

Interviewer follows up

Can I buy a domain in Azure DNS?

You

No. Azure DNS hosts domains. You buy the domain from a registrar (or through App Service domains) and point its name servers to Azure DNS.

Intermediate What are the benefits of Azure DNS?

Model answer

Reliability and performance from a global network of name servers using anycast, security through Azure RBAC, activity logs and resource locks, ease of use with the same portal, CLI and APIs, private DNS zones for VNets, and alias records that track Azure resources.

Experienced developer Why are private DNS zones important with private endpoints?

Model answer

A private endpoint gives a PaaS service a private IP in your VNet. Private DNS zones make the service's normal name resolve to that private IP inside the VNet, so applications connect privately without code changes.

Test yourself with exercises

3 original practice questions in the AZ-900 style. Pick your answers, then check them. You will see why each option is right or wrong. Score 75% or more and this topic is marked complete.

Question 1

Question 1 of 3

What does Azure DNS do?

Question 2

Question 2 of 3

You want names to resolve to private IP addresses only inside your virtual networks. What should you use?

Question 3

Question 3 of 3 · Select 2

Which TWO features can secure Azure DNS zones?

Quick revision

Key points

  • Azure DNS hosts DNS domains and records on Microsoft's global network.
  • Managed with Azure tools, RBAC, locks and logs.
  • Private DNS zones resolve names inside VNets.
  • You cannot buy domain names in Azure DNS.

Important terminology

DNS
Domain Name System, the internet's phone book that turns names into IP addresses.
DNS zone
A container for the DNS records of one domain, such as contoso.com.
Private DNS zone
A DNS zone that resolves names only inside your virtual networks.
Alias record
A DNS record that points directly to an Azure resource and updates if its IP changes.

Common mistakes

  • Thinking Azure DNS sells domain names.

Exam tips

  • "Host DNS domains in Azure" = Azure DNS.

Five quick revision questions

  1. 1.What does DNS do?Show

    Translates names into IP addresses.

  2. 2.Can you buy a domain name through Azure DNS?Show

    No, it hosts domains you already own.

  3. 3.What is a private DNS zone?Show

    A DNS zone that resolves names only within your virtual networks.

  4. 4.What is an alias record?Show

    A record that points directly to an Azure resource and updates automatically.

  5. 5.How is Azure DNS secured?Show

    With Azure RBAC, activity logs and resource locks.

Official references

Make it stick: play a quick gameSort It, Match the Pairs, Lightning Round and Who Am I? Earn XP and badges. Play ❯

Finished this lesson? Tick it off. Your progress is saved in this browser.

Next up: Public and Private Endpoints