Examkin

Question

Difficulty: MediumConfigure Azure App Services

An administrator is configuring a custom domain named `www.contoso.com` for an Azure App Service web app named `app-contoso`. The web app currently runs on a Standard (S1) App Service plan.

The administrator needs to verify domain ownership to bind the custom domain to the web app, but must ensure that no live user traffic is routed to the web app during the initial configuration phase.

Which DNS record should the administrator create in the `contoso.com` DNS zone to meet these requirements?

  1. A TXT record named `asuid.www` containing the Custom Domain Verification ID of the web app.Answer
  2. B
    A CNAME record named `www` pointing to `app-contoso.azurewebsites.net`.
  3. C
    A TXT record named `asuid.www` containing the Custom Domain Verification ID of the web app, while scaling down the App Service plan to the Free (F1) tier.
  4. D
    A CNAME record named `www` pointing to `app-contoso.azurewebsites.net`, and an inbound Network Security Group (NSG) rule associated with the App Service to deny public Internet traffic.

Answer

A TXT record named `asuid.www` containing the Custom Domain Verification ID of the web app.
The correct answer is the TXT record named `asuid.www` containing the Custom Domain Verification ID of the web app. This record is checked by Azure to confirm ownership of the subdomain without altering HTTP/HTTPS routing. This allows the administrator to successfully verify and bind the domain to the App Service in a staging manner before actually routing client traffic.

Step-by-Step Solution

1
Retrieve the Custom Domain Verification ID from the Custom Domains settings blade of the App Service in the Azure Portal.
Obtained the unique verification string required for domain validation.
This verification ID proves domain ownership to Azure before the domain is bound.
2
Create a TXT record in the DNS zone for `contoso.com` with the hostname `asuid.www` and the verification ID as the value.
The TXT record is published in public DNS.
Creating a TXT record does not route any live HTTP traffic, fulfilling the requirement of preventing traffic routing during configuration.
3
Validate the domain inside the Azure App Service portal and complete the custom domain configuration.
The custom domain is successfully added to the App Service without routing traffic until the CNAME or A record is created later.
The Standard (S1) App Service plan supports custom domains, allowing the configuration to be saved.

Key Concept

Azure App Service Custom Domain Verification using TXT records to prevent premature traffic routing.
Estimated Time:1m 30s
Rate this question

Topics

Configure Azure App Services

More questions from this topic