Question

Difficulty: HardConfigure and Manage Azure CDN Endpoints and Caching Rules

You are configuring a custom domain with HTTPS enabled for an Azure CDN endpoint. You plan to use a CDN-managed certificate to secure the custom domain.

Arrange the steps in the correct order to configure and enable HTTPS for the custom domain on your Azure CDN endpoint.

  1. 1Create a CNAME record at your DNS provider to map your custom domain to the Azure CDN endpoint hostname.
  2. 2Add the custom domain to your Azure CDN endpoint in the Azure Portal.
  3. 3Open the custom domain configuration, toggle the HTTPS setting to On, and choose CDN managed as the certificate management type.
  4. 4Allow Azure CDN to automatically validate domain ownership via the CNAME mapping.
  5. 5Wait for the certificate provisioning process to complete and the HTTPS status to show as Active.

Answer

The correct sequence begins with creating the CNAME record, adding the custom domain to the CDN endpoint, enabling HTTPS with CDN-managed certificate, allowing the automated domain validation to complete, and finally waiting for the provisioning and activation status to show Active.
The correct order requires creating the CNAME mapping first, registering the custom domain, enabling HTTPS with CDN-managed configuration, validating domain ownership, and waiting for the final propagation. This ensures that validation succeeds at each step without errors.

Step-by-Step Solution

1
Create a CNAME record mapping the custom domain to the CDN endpoint.
DNS propagation of the mapping to the endpoint.
Ensures Azure CDN can verify the domain association in the next step.
2
Add the custom domain to the endpoint in the Azure portal.
The custom domain is registered and associated with the CDN endpoint.
Enables the domain to receive traffic routed through the CDN.
3
Enable Custom Domain HTTPS and select CDN managed certificate.
The HTTPS configuration workflow is initiated.
Tells Azure CDN to automatically manage the SSL/TLS certificate creation and renewal.
4
Let Azure CDN validate the domain ownership via CNAME.
Domain ownership is verified.
Necessary security check before issuing a public certificate.
5
Wait for the certificate to propagate and status to transition to Active.
HTTPS traffic to the custom domain is successfully encrypted.
Completes the SSL binding process across all global edge servers.

Key Concept

Configuring custom domain HTTPS using CDN-managed certificates on Azure CDN endpoints.
Rate this question