Azure DNS, Load Balancing and Network Troubleshooting
This topic covers Azure DNS, private DNS, internal and public load balancers, load balancing troubleshooting, name resolution, endpoints, and service reachability.
How to study for AZ-104
Treat each AZ-104 item as an admin workflow: identify the scope, resource type, access boundary, deployment method, monitoring signal, or recovery requirement.
Core concepts
Concept 1
Azure DNS, Load Balancing and Network Troubleshooting questions reward operational Azure administration judgment rather than simple service-name recall.
Exam cue: Identify the Azure scope: tenant, management group, subscription, resource group, resource, subnet, or identity.
Concept 2
The best answer identifies the scope, resource type, access path, deployment method, monitoring signal, and recovery requirement.
Exam cue: Match the tool to the administrative task: manage access, deploy, secure, monitor, back up, or troubleshoot.
Concept 3
Eliminate answers that confuse RBAC with policy, public access with private access, monitoring with backup, or templates with manual changes.
Exam cue: Prefer least privilege, repeatable deployment, protected storage, private networking, and validated recovery.
Risk pitfalls and guardrails
Using Azure Policy when the question asks who is allowed to perform an action.
Guardrail: Avoid answers that confuse RBAC with Policy, tags with network controls, dashboards with backup, or public exposure with secure private access.
Opening public access when private endpoints, service endpoints, or NSGs meet the requirement.
Guardrail: Avoid answers that confuse RBAC with Policy, tags with network controls, dashboards with backup, or public exposure with secure private access.
Assuming backup exists before checking vault, policy, retention, and restore validation.
Guardrail: Avoid answers that confuse RBAC with Policy, tags with network controls, dashboards with backup, or public exposure with secure private access.
Memory anchors
Azure DNS
Azure DNS hosts DNS zones and records for public name resolution.
Private DNS
Azure Private DNS provides name resolution inside virtual networks.
A Record
An A record maps a name to an IPv4 address.
CNAME
A CNAME aliases one DNS name to another DNS name.
Public Load Balancer
A public load balancer distributes internet-facing traffic to back-end resources.
Internal Load Balancer
An internal load balancer distributes private traffic inside a virtual network.
Health Probe
A health probe determines whether a back-end instance should receive load-balanced traffic.
Backend Pool
A backend pool contains resources that receive load-balanced traffic.
Name Resolution
Name resolution failures can break access even when IP connectivity works.
Network Watcher
Network Watcher provides tools to diagnose Azure network connectivity and configuration.
Checkpoint rule
Do the check-up only after you can summarize each concept in one sentence and identify one dangerous pitfall from memory.
Knowledge Check (after reading)
Short check-up to confirm understanding of this module.
Check-up Questions
A company hosts example.com in Azure DNS after purchasing it from a registrar. What must be configured at the registrar?
A public Azure DNS zone contains an A record named www. What does the record map?
Answer all questions to submit.
Next step personalized recommendations
Continue learning
Move forward only after this module is stable.
What is Pass Harbor?
Completely free exam prep for 317 U.S. exams.
- Practice questions
- Flashcards
- Study guides
- Mock exams
- No registration
- No paywall
- Start instantly
“No more expensive exam prep. Quality study tools should be accessible to everyone.”