Examkin

Question

Difficulty: Very hardConfigure Azure App Service Web Apps

An organization plans to migrate a public-facing website to an Azure App Service web app named `prod-web`. The website is currently hosted on-premises and is accessed via the custom subdomain `sales.contoso.com`.

The migration must meet the following requirements:
- The website must experience zero downtime during the DNS transition.
- The custom domain `sales.contoso.com` must be secured with an SSL/TLS certificate.
- The domain binding and SSL configuration must be fully prepared in the Azure Web App before the live DNS traffic is rerouted.
- The web app's Custom Domain Verification ID is `A1B2C3D4E5F6G7H8`.

Which three actions should you perform to prepare the web app for the transition? (Select three.)

  1. Create a DNS TXT record named asuid.sales with the value A1B2C3D4E5F6G7H8.Answer
  2. Add the custom hostname sales.contoso.com to the prod-web web app.Answer
  3. Upload and bind a custom SSL/TLS private certificate to sales.contoso.com.Answer
  4. D
    Create a DNS TXT record named awverify.sales with the value A1B2C3D4E5F6G7H8.
  5. E
    Create a DNS CNAME record for sales.contoso.com pointing to prod-web.azurewebsites.net prior to adding the custom domain in Azure.
  6. F
    Generate a free App Service Managed Certificate for sales.contoso.com prior to adding the custom domain.

Answer

Create a DNS TXT record named asuid.sales with the value of the Custom Domain Verification ID, add the custom domain sales.contoso.com to the web app, and upload and bind a custom TLS/SSL private certificate.
To prepare a web app for migration with zero downtime, you must map the custom domain and configure its SSL binding before updating the routing CNAME record. Creating a TXT record named `asuid.sales` with the Custom Domain Verification ID verifies ownership. After verification, the hostname `sales.contoso.com` can be added. Finally, a custom private TLS/SSL certificate must be uploaded and bound; a managed certificate cannot be generated because it requires the DNS routing to already point to Azure, which is not possible during the pre-verification stage.

Step-by-Step Solution

1
Create a DNS TXT record named asuid.sales containing the Custom Domain Verification ID.
The verification record is registered in the public DNS namespace.
Allows Azure App Service to verify domain ownership without rerouting live website traffic.
2
Add the custom hostname sales.contoso.com to the web app.
Azure resolves the TXT record, completes verification, and links the hostname to the web app.
Registers the custom host header on the Web App so it is ready to receive requests.
3
Upload and bind a custom private SSL/TLS certificate (.pfx) to sales.contoso.com.
The SSL binding is configured on the Web App.
Secures the domain using SSL/TLS before traffic is redirected, avoiding downtime.

Key Concept

Zero-Downtime Custom Domain Mapping and Pre-binding TLS/SSL Certificates
Estimated Time:3m 0s
Rate this question

Topics

Configure Azure App Service Web Apps

More questions from this topic