Wingtip Toys verified wingtiptoys.com in Microsoft 365 and now want…

Question

Wingtip Toys verified wingtiptoys.com in Microsoft 365 and now wants Exchange Online to receive mail for that domain. Which DNS records must be configured for mail delivery and anti-spoofing readiness?

Accepted Answer

MX record for mail routing, plus recommended SPF (TXT), and typically DKIM/DMARC as follow-on security records — Mail won't land without an MX record — that's the address on the envelope. SPF/DKIM/DMARC are the bouncers that prove you can send as that domain.

Answer

Only a CNAME record pointing www to Microsoft 365

Answer

Only an A record for the public IP of Exchange Online

Answer

SRV records for Autodiscover only, with no MX record

Wingtip Toys verified wingtiptoys.com in Microsoft 365 and now wants Exchange Online to receive mail for that domain. Which DNS records must be configured for mail delivery and anti-spoofing readiness?

Short Explanation and Infographic

Full Explanation