All, we are working with a 3rd party related to CMMC compliance. Our preference is an enclave in Azure/M365 with virtual desktops but they are pointing out Azure does not yet have DNSSEC. Can someone more knowledgeable than me chime in on this control/requirement:

1. Ways around it
   
2. The real need when using Azure as a CMMC enclave.
   

I've not run into this yet and my research shows Microsoft has not implemented this and it's been ask for, for quite some time.

Thanks.