Soru

Zorluk: ZorConfigure Azure App Services

An administrator needs to configure a custom domain named shop.contoso.com for an Azure App Service web app named app-shop-prod. The web app currently runs on a Basic B1 App Service plan. The administrator plans to secure the custom domain by using a free Azure App Service Managed Certificate.

You need to identify the correct sequence of actions to achieve this goal. Which sequence of actions should the administrator perform?

  1. 1Scale up the App Service plan of app-shop-prod to the Standard S1 tier.
  2. 2In the DNS zone for contoso.com, create a CNAME record that maps shop to app-shop-prod.azurewebsites.net.
  3. 3In the Azure portal, add shop.contoso.com as a custom domain to the web app.
  4. 4Create an App Service Managed Certificate for shop.contoso.com.
  5. 5Add a TLS/SSL binding for shop.contoso.com using the App Service Managed Certificate.

Cevap

Scale up the App Service plan of app-shop-prod to the Standard S1 tier, create the CNAME record in the DNS zone, add the custom domain to the web app, create the App Service Managed Certificate, and then add the TLS/SSL binding using the certificate.
To secure a custom domain using a free Azure App Service Managed Certificate, the web app must run on a Standard or higher plan. Therefore, scaling up the App Service plan to Standard S1 is the first requirement. Next, the DNS CNAME record must be created in the DNS zone to point to the default App Service URL. This allows Azure to verify ownership when adding the custom domain in the portal. Once the custom domain is successfully added and validated, the App Service Managed Certificate can be generated for it. Finally, you create the TLS/SSL binding to secure the custom domain with the certificate.

Adım Adım Çözüm

1
Scale up the App Service plan from Basic B1 to Standard S1.
The App Service plan is upgraded to a tier that supports custom SSL certificates and managed certificates.
App Service Managed Certificates are not supported in the Basic tier.
2
Create a CNAME record pointing shop to app-shop-prod.azurewebsites.net.
DNS resolution is configured, allowing Azure to perform verification.
Azure verifies domain ownership during custom domain configuration by querying the public DNS records.
3
Add the custom domain shop.contoso.com to the web app in the Azure portal.
The custom domain is associated with the App Service web app.
A custom domain must be associated with the app before an App Service Managed Certificate can be generated for it.
4
Generate an App Service Managed Certificate for the custom domain.
A free SSL/TLS certificate is created and managed by Azure.
The certificate is issued specifically for the custom domain that is already mapped to the app.
5
Create an SNI SSL binding linking the custom domain to the managed certificate.
HTTPS is enabled for the custom domain.
This is the final step to secure traffic to the custom domain using the issued certificate.

Anahtar Kavram

Configuring custom domains and securing them with App Service Managed Certificates requires a minimum plan tier (Standard) and a specific sequence of verification, registration, certificate creation, and binding.
Bu soruyu puanla