Examkin

Question

Difficulty: Very hardConfigure Azure App Service Web Apps

You are configuring a custom domain named `www.contoso.com` for an Azure App Service web app named `app-prod-westus`. You need to secure the custom domain using a free App Service Managed Certificate.

Which sequence of actions should you perform?

  1. 1Create a DNS CNAME record that points `www.contoso.com` to `app-prod-westus.azurewebsites.net`.
  2. 2Add the custom hostname `www.contoso.com` to the web app using `az webapp config hostname add`.
  3. 3Generate a free App Service Managed Certificate for `www.contoso.com` using `az webapp config ssl create`.
  4. 4Bind the generated certificate to the custom hostname using `az webapp config ssl bind` with the SNI SSL type.

Answer

First, create a DNS CNAME record pointing `www.contoso.com` to the default Azure Web Apps URL. Second, add the custom hostname `www.contoso.com` to the web app. Third, generate the free App Service Managed Certificate for the domain. Finally, bind the generated certificate to the custom hostname using SNI SSL.
To secure an App Service web app with a custom domain using a free App Service Managed Certificate, you must perform these steps in order. First, configure the DNS CNAME record pointing to the app's default hostname to allow ownership verification. Second, register the custom domain on the App Service. Third, request the managed certificate for the custom domain. Finally, bind the issued certificate to the hostname using SNI SSL.

Step-by-Step Solution

1
Create the CNAME record pointing `www.contoso.com` to `app-prod-westus.azurewebsites.net` in your domain registrar's DNS zone.
The DNS record propagates, allowing Azure to resolve and verify the domain name.
Azure App Service requires domain ownership verification before the hostname can be registered in the App Service instance.
2
Run `az webapp config hostname add` to add `www.contoso.com` to the web app.
The custom hostname is registered on the web app.
You must associate the domain with the app first. Free App Service Managed Certificates can only be issued for hostnames that are already bound to the App Service web app.
3
Run `az webapp config ssl create` to generate the free App Service Managed Certificate for `www.contoso.com`.
An App Service Managed Certificate is issued for the domain, and its thumbprint is returned.
The certificate must exist in the App Service environment before it can be bound to the custom domain.
4
Run `az webapp config ssl bind` using the certificate thumbprint, specifying `SNI` as the SSL type.
The SSL binding is configured, securing incoming traffic to `www.contoso.com`.
An SSL binding is required to associate the certificate with the hostname and enable HTTPS.

Key Concept

Azure App Service custom domain verification and free App Service Managed Certificate lifecycle management.
Rate this question

Topics

Configure Azure App Service Web Apps

More questions from this topic