Could someone explain the preferable DNS configuration

@andyg2 not a direct answer to your doubts but reading this one may help you: Do I need a new TLS certificate if my website is on another host?