# Sending domains, DNS records and IP reputation

*Marketing Cloud Next Consultant Study Guide · Platform Setup & Governance · Last updated November 6, 2026 · https://www.certifyforce.com/study-guide/marketing-cloud-next-consultant/platform-setup-and-governance/sending-domains-dns-records-and-ip-reputation*

How to pick and authenticate a sending subdomain, what each generated DNS record does, when a domain is authorized instead of authenticated, how to share an Engagement domain, and how managed dedicated IPs and warming protect reputation.

- Certification: Salesforce Marketing Cloud Next Consultant
- Exam section: Platform Setup & Governance
- Study guide: https://www.certifyforce.com/study-guide/marketing-cloud-next-consultant

**Official exam objective:**

> Given a scenario, configure self-service domain authentication or domain authorization for branded, authenticated email delivery.

## What the exam expects

- Choose between an authenticated and an authorized domain for a stated email need.
- Pick a sending subdomain and plan self-service authentication with IT.
- Identify the generated DNS records, and decide what to do about DMARC.
- Diagnose a failed verification from its error and the DNS provider's behavior.
- Share an Engagement domain, set From addresses and configure Reply Mail Management.
- Explain how managed dedicated IPs scale and why warming still matters.

**Key terms.** *Authenticated domain*: a domain you send from. *Authorized domain*: a domain Marketing Cloud Next may use for CC or dynamic reply-to addresses. *DKIM*: authentication that lets mailbox providers check a message is authentic and unmodified. *DMARC*: tells receivers how to handle mail that fails SPF or DKIM. *Reply Mail Management (RMM)*: rules for incoming replies to your email. *Warming*: building a positive sending history.

## Key facts

| Fact | Detail | Source |
|---|---|---|
| Required for email | Authenticate a domain, verify a sender address, provide a physical address | [Quick Start](https://help.salesforce.com/s/articleView?id=mktg.mktg_admin_email_quick_start.htm&type=5&language=en_US) |
| Separate use cases | Email link tracking, SMS and landing pages each need a different domain or subdomain | [Domain Settings](https://help.salesforce.com/s/articleView?id=mktg.mktg_admin_domains_ref.htm&type=5&language=en_US) |
| Government Cloud Plus | Authenticated and authorized Unified Messaging domains aren't supported | [Set Up and Authenticate](https://help.salesforce.com/s/articleView?id=mktg.um_channel_email_set_up_and_authenticate_a_sending_domain.htm&type=5&language=en_US), [Configure Domains for Dynamic Reply](https://help.salesforce.com/s/articleView?id=mktg.um_channel_email_authorized_email_domains.htm&type=5&language=en_US) |
| Other Salesforce clouds | Users on an authorized domain can send from that address without extra verification | [Configure Domains for Dynamic Reply](https://help.salesforce.com/s/articleView?id=mktg.um_channel_email_authorized_email_domains.htm&type=5&language=en_US) |
| CNAME count | 8 required, per the setup article | [DNS Tips](https://help.salesforce.com/s/articleView?id=001533984&type=1&language=en_US) |
| Sharing permission | Salesforce Admin role or equivalent | [Share Email Sending Domains](https://help.salesforce.com/s/articleView?id=mktg.mke_share_domains_mce_mcn.htm&type=5&language=en_US) |
| Pool types | General is shared across accounts in a region; Dedicated is isolated to one customer | [Managed Dedicated IP Addresses](https://help.salesforce.com/s/articleView?id=mktg.um_channel_email_managed_dedicated_ip_addresses.htm&type=5&language=en_US) |

## Check yourself

- Why might an admin enter GoDaddy records by hand instead of importing a file?
- When would an admin clear the automatic From address import during domain sharing?
- Why can verifying an authorized domain help teams outside marketing?
- What does a Dedicated pool type mean?

## Sources

- [Marketing Cloud Next - Email Authenticated Domains Setup and DNS Tips](https://help.salesforce.com/s/articleView?id=001533984&type=1&language=en_US)
- [Set Up and Authenticate a Sending Domain](https://help.salesforce.com/s/articleView?id=mktg.um_channel_email_set_up_and_authenticate_a_sending_domain.htm&type=5&language=en_US)
- [CNAME Records for Functional Subdomains](https://help.salesforce.com/s/articleView?id=mktg.um_channel_email_cname_records_for_functional_subdomains.htm&type=5&language=en_US)
- [Domain Settings in Marketing Cloud Next](https://help.salesforce.com/s/articleView?id=mktg.mktg_admin_domains_ref.htm&type=5&language=en_US)
- [Configure Domains for Dynamic Reply and CC Addresses in Marketing Cloud Next](https://help.salesforce.com/s/articleView?id=mktg.um_channel_email_authorized_email_domains.htm&type=5&language=en_US)
- [Set Up an Authorized Email Domain](https://help.salesforce.com/s/articleView?id=xcloud.security_email_auth_domain_setup.htm&language=en_US)
- [DNS Provider Behavior](https://help.salesforce.com/s/articleView?id=mktg.um_channel_email_dns_provider_behavior.htm&type=5&language=en_US)
- [Share Email Sending Domains with Marketing Cloud Next](https://help.salesforce.com/s/articleView?id=mktg.mke_share_domains_mce_mcn.htm&type=5&language=en_US)
- [Authenticate a From Address for Unified Messaging](https://help.salesforce.com/s/articleView?id=mktg.um_channel_email_from_address.htm&type=5&language=en_US)
- [Configure Reply Mail Management for a Unified Messaging Domain](https://help.salesforce.com/s/articleView?id=mktg.um_channel_email_rmm.htm&type=5&language=en_US)
- [Managed Dedicated IP Addresses](https://help.salesforce.com/s/articleView?id=mktg.um_channel_email_managed_dedicated_ip_addresses.htm&type=5&language=en_US)
- [Marketing Email Reputation Warming: 30 Day Plan](https://help.salesforce.com/s/articleView?id=005318368&type=1&language=en_US)
- [Quick Start: Set Up Email Sending](https://help.salesforce.com/s/articleView?id=mktg.mktg_admin_email_quick_start.htm&type=5&language=en_US)

## About the full unit

The "Core concepts", "Exam traps" and "Worked scenario" sections of this unit, its 13 linked practice questions, and unlimited timed mock exams are included with the Marketing Cloud Next Consultant pack (USD $19): https://www.certifyforce.com/practice-exams