DNS Records

Question 1

What is a CNAME record?

Answer 1

You should use a CNAME record to specify an alias value of autodiscovery.outlook.com. This will allow client to use the Autodiscover service. The Autodiscover service allows client to easily connect to exchange online. The service automatically locates the Exchange server host and configure outlook.

Question 2

What is a TXT record?

Answer 2

TXT records associate a text value with DNS item, but do not support the use of the Autodiscover service. You use TXT record to verify your domain, SPF (sender policy framework) with your domain to prevent spam or use Exchange federation.

Question 3

What is a MX record?

Answer 3

MX records are used to identify mail server. Although you would create a MX record to route incoming mail to your domain to the exchange online service in office 365, this would not support the use of Autodiscover.
• Allows you to route email

Question 4

How do you modify the purpose of a domain?

Answer 4

You change the domain specific records to configure:
Exchangle online 
SFB 
Mobile device management for O365
Additional O365 office records

Question 5

What records are associated with Exchange online?

Answer 5

Exchange Online
CNAME, MX, TXT

* MX record tells clients who are emailing you where to go. For O365 your email goes through Protection.Outlook.com
* TXT record allows you to setup and SPF (sender policy framework)  which says all our email should come from Protection.Outlook.com
* CNAME: The CNAME is set up for Autodiscovery. This allows client programs like Outlook to discover the user settings.

Question 6

What records are associated with SFB?

Answer 6

2 CNAME, 2 SRV

• CNAME: The CNAME is set up for Autodiscovery. This allows Autodiscovery for mobile and desktop application to automatically find the service.
  
  • SRV record give users the ability to see online presence and external communications

Question 7

What is MSOID?

Answer 7

Is used to determine where your endpoint for authentication should be located to ensure rapid response. Since each application used by O365 need to authenticate this is set up to ensure you are able to securely use the service quickly and effetely.

Question 8

How do you transfer a domain away from Microsoft?

Answer 8

• To change ownership to O365, you will have to have confirmed your domain via TXT records and setup the name servers to point to Microsoft nameservers.
• Cannot transfer a domain that has not been registered.
• Cannot transfer a domain to another register for 60 days after you register it with Microsoft

Question 9

How does Microsoft verify your domain?

Answer 9

TXT or MX record for domain verification!

○ Microsoft can verify your GoDaddy domain if you enter your credentials.
• Require access to DNS host provider such as GoDaddy
• Add either TXT or MX record
○ TXT: Host name - type @, leave blank, or type domain name
○ MX host name- type @, or type domain name
§ Set priority lower than existing MX as there is already one for routing email
○ Set TTL (Time to live) to 1 hour, 60 minutes, 3600 seconds
○ Set value to MS=msxxxxxxxxxxx (X will be swapped out)
• Navigate to: Domains in O365- Setup-Start Setup
• Click verify to verify ownership of domain

Question 10

What is SPF designed to prevent?

Answer 10

Spoofing however some thing it cant protect against therefore there are alternative tools.
○ Domain Keys Identifying Mail
○ Domain-based message authentication reporting and conformance