Examkin

Question

Difficulty: MediumDeploy and Configure Azure Container Apps

An organization has deployed an Azure Container App named feedback-portal. You are tasked with configuring a custom domain named feedback.contoso.com for this Container App and securing it using an Azure Container Apps managed certificate. Which sequence of steps should you perform to complete the configuration?

  1. 1Configure the required TXT and CNAME records at your DNS registrar using the domain verification code and default domain of the Container App.
  2. 2Add the custom domain feedback.contoso.com to the feedback-portal Container App to trigger the validation of ownership.
  3. 3Create an Azure Container Apps managed certificate for feedback.contoso.com.
  4. 4Update the custom domain configuration on the Container App to bind the managed certificate, securing the ingress with HTTPS.

Answer

To configure a custom domain and secure it with a managed certificate, you must first create the DNS TXT and CNAME records at your DNS provider. Next, add the custom domain to the Container App to validate ownership. Once validated, generate the managed certificate, and finally bind the certificate to the domain to secure the connection.
The correct order begins with configuring DNS records at the registrar, which allows Azure to verify ownership. Next, adding the custom domain to the Container App validates ownership. Only after successful validation can the managed certificate be generated. Finally, the certificate is bound to the custom domain to secure the connection with HTTPS.

Step-by-Step Solution

1
Create the DNS TXT and CNAME records at the DNS registrar.
The domain registrar has active records pointing to the Container App.
Azure checks these records during the validation phase to verify that you own the domain.
2
Add the custom domain to the Container App to trigger verification.
The domain is successfully added and verified on the Container App.
The domain must be validated and added to the Container App before a managed certificate can be issued.
3
Create the Azure Container Apps managed certificate for the domain.
The managed certificate is generated by Azure and is ready for binding.
The certificate must exist within the Container Apps environment before it can be bound to the custom domain.
4
Bind the managed certificate to the custom domain.
The custom domain is bound to the certificate, securing all incoming traffic with HTTPS.
This is the final step that establishes SSL/TLS termination for the custom domain.

Key Concept

Custom domain verification and managed certificate binding in Azure Container Apps.
Estimated Time:2m 0s
Rate this question

Topics

Deploy and Configure Azure Container Apps

More questions from this topic