When an administrator adds a custom domain name to an Azure AD, it is initially in an un__________ state. Azure AD will not allow any directory resources to use an un__________ domain name. This ensures that only one directory can use a domain name, and the organization using the domain name owns that domain name. So, after adding the custom domain name, you must demonstrate ownership of the domain name. This is called __________. and is done by adding a DNS record (MX or TXT) that is provided by Azure into your company's DNS zone. Once this record is added, Azure will query the DNS domain for the presence of the record. This could take several minutes or several hours. If Azure __________ the presence of the DNS record, it will then add the domain name to the subscription.