Sending domains, DNS records and IP reputation
How to pick and authenticate a sending subdomain, what each generated DNS record does, when a domain is authorized instead of authenticated, how to share an Engagement domain, and how managed dedicated IPs and warming protect reputation.
Given a scenario, configure self-service domain authentication or domain authorization for branded, authenticated email delivery.
~8 min read · 13 practice questions ·
What the exam expects
- Choose between an authenticated and an authorized domain for a stated email need.
- Pick a sending subdomain and plan self-service authentication with IT.
- Identify the generated DNS records, and decide what to do about DMARC.
- Diagnose a failed verification from its error and the DNS provider's behavior.
- Share an Engagement domain, set From addresses and configure Reply Mail Management.
- Explain how managed dedicated IPs scale and why warming still matters.
Key terms. Authenticated domain: a domain you send from. Authorized domain: a domain Marketing Cloud Next may use for CC or dynamic reply-to addresses. DKIM: authentication that lets mailbox providers check a message is authentic and unmodified. DMARC: tells receivers how to handle mail that fails SPF or DKIM. Reply Mail Management (RMM): rules for incoming replies to your email. Warming: building a positive sending history.
Key facts
- Detail
- Authenticate a domain, verify a sender address, provide a physical address
- Detail
- Email link tracking, SMS and landing pages each need a different domain or subdomain
- Detail
- Authenticated and authorized Unified Messaging domains aren't supported
- Detail
- Users on an authorized domain can send from that address without extra verification
- Detail
- 8 required, per the setup article
- Detail
- Salesforce Admin role or equivalent
- Detail
- General is shared across accounts in a region; Dedicated is isolated to one customer
Sources for this section (7)
- Quick Starthelp.salesforce.com (opens in a new tab)
- Domain Settingshelp.salesforce.com (opens in a new tab)
- Set Up and Authenticatehelp.salesforce.com (opens in a new tab)
- Configure Domains for Dynamic Replyhelp.salesforce.com (opens in a new tab)
- DNS Tipshelp.salesforce.com (opens in a new tab)
- Share Email Sending Domainshelp.salesforce.com (opens in a new tab)
- Managed Dedicated IP Addresseshelp.salesforce.com (opens in a new tab)
- Why might an admin enter GoDaddy records by hand instead of importing a file?
- When would an admin clear the automatic From address import during domain sharing?
- Why can verifying an authorized domain help teams outside marketing?
- What does a Dedicated pool type mean?
The questions are free to read. Answers with their sources and self-grading are included with the pack.
Keep reading with the Marketing Cloud Next Consultant pack
- Core concepts
- Exam traps
- Worked scenario
The pack includes:
- All 24 lessons of the Marketing Cloud Next Consultant guide, with reading progress
- Interactive decision walks and step-by-step sequence steppers
- Practice exams purchase adds inline bank questions and topic practice (13 questions for this lesson)
- An official source cited for every claim
- An AI tutor that answers from the guide
- Choose guide-only, practice-only, or save $4 with both