Question

Difficulty: MediumConfigure and Manage Azure CDN Endpoints and Caching Rules

You need to secure static content delivered via an Azure CDN endpoint by configuring a custom domain named `media.contoso.com` with HTTPS. You want to use a free certificate managed by Azure CDN. Which sequence of actions must you perform to configure the custom domain and enable HTTPS? Arrange the steps in the correct order.

  1. 1Create a DNS CNAME record mapping the custom domain to the Azure CDN endpoint hostname.
  2. 2Add the custom domain to the Azure CDN endpoint within the Azure portal.
  3. 3Enable HTTPS on the custom domain settings page in the Azure portal.
  4. 4Select CDN-managed as the certificate management type and save the changes.
  5. 5Wait for Azure to complete domain validation, certificate provisioning, and propagation to edge nodes.

Answer

To configure and secure a custom domain with an Azure CDN-managed certificate, you must first create a DNS CNAME record mapping the custom domain to your CDN endpoint hostname. Then, add the custom domain to the CDN endpoint in the Azure portal. Next, enable HTTPS on the custom domain, select CDN-managed certificate type, and save the settings. Finally, wait for the domain validation, certificate provisioning, and global propagation steps to complete.
The correct sequence begins with establishing the DNS CNAME record so that Azure CDN's domain ownership validation succeeds when adding the custom domain. After adding the domain, HTTPS can be enabled. Setting the certificate management type to CDN-managed allows Azure to handle the certificate lifecycle. The final phase involves waiting for the automated validation, certificate issuance, and edge replication to complete.

Step-by-Step Solution

1
Create a DNS CNAME record.
The custom domain points to the CDN endpoint hostname.
Azure CDN requires the CNAME record to exist to validate domain ownership when adding the custom domain, preventing unauthorized domain associations.
2
Add the custom domain to the CDN endpoint in the Azure Portal.
The custom domain is registered with the CDN endpoint.
Enabling HTTPS requires the custom domain to be linked to the endpoint first.
3
Enable the HTTPS feature on the custom domain.
The HTTPS configuration panel is opened.
This begins the security provisioning process for the domain.
4
Select the CDN-managed certificate management type.
Azure CDN is authorized to request and manage the SSL certificate.
Allows Azure CDN to handle the certificate lifecycle without user intervention.
5
Wait for validation, provisioning, and propagation.
The HTTPS status transitions to Enabled and traffic is secured.
DNS propagation and certificate deployment across edge POPs takes time to complete.

Key Concept

Configuring custom domains and enabling CDN-managed HTTPS on Azure CDN endpoints.
Estimated Time:2m 0s
Rate this question