Which two actions should you perform?

You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. The on-premises network is connected to Azure by using a Site-to-Site VPN.

You have the DNS zones shown in the following table.

You need to ensure that names from (aDiifcam.com can be resolved from the on-premises network.

Which two actions should you perform? Each correct answer presents part of the solution, NOTE: Each correct selection Is worth one point
A . Create a conditional forwarder for fabrikam.com on DC1.
B. Create a stub zone for fabrikam.com on DC1.
C. Create a secondary zone for fabnlcam.com on DO.
D. Deploy an Azure virtual machine that runs Windows Server. Modify the DNS Servers settings for the virtual network.
E. Deploy an Azure virtual machine that runs Windows Server. Configure the virtual machine &s a DNS forwarder.

Answer: A,E

Explanation:

Reference: https://docs.microsoft.com/en-us/azure/private-link/private-endpoint-dns#on-premises-workloads-using-a-dns-forwarder