After the consultant adds a sending domain, Unified Messaging generates the DNS configuration necessary to authenticate that domain. The required next step is to copy the generated DNS entries and configure them with the organization's DNS provider . Salesforce's current setup procedure states that the generated entries include CNAME and DKIM-related records , after which the consultant returns to Salesforce and verifies the domain.

Salesforce's 2026 DNS guidance states that Marketing Cloud Next authenticated domains require multiple CNAME records and that the outbound CNAME records provide DKIM authentication. The exact number of required CNAME entries can vary with the specific domain configuration and whether the domain is shared, but option B captures the required procedure.

A standalone TXT ownership record isn't sufficient for Marketing Cloud Next email authentication in this scenario. Sender Authentication Package is terminology associated primarily with the legacy Marketing Cloud Engagement configuration model and isn't how Marketing Cloud Next Unified Messaging authenticates a new sending domain.

The master bank keys B. Salesforce's current domain-authentication procedure confirms this DNS configuration sequence.

Study Guide Reference: Platform Setup and Governance → Unified Messaging → Authenticated Sending Domains and DNS Authentication.

===============