Exam AZ-700 topic 2 question 65 discussion

Actual exam question from Microsoft's AZ-700

Question #: 65
Topic #: 2

HOTSPOT
-

You have an Azure subscription that contains an Azure key vault named Vault1 and an app registration for an Azure AD app named App1.

You have a DNS domain named contoso.com that is hosted by a third-party DNS provider.

You plan to deploy App1 by using Azure App Service. App1 will have the following configurations:

• App1 will be hosted across five App Service apps.
• Users will access App1 by using a URL of https://app1.contoso.com.
• The user traffic of App1 will be managed by using Azure Front Door.
• The traffic between Front Door and the App Service apps will be sent by using HTTP.
• App1 will be secured by using an SSL certificate from a third-party certificate authority (CA).

You need to support the Front Door deployment.

Which two DNS records should you create, and to where should you import the SSL certificate for App1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by seedati at Nov. 2, 2023, 1:50 p.m.

Comments

Submit Cancel

Lazylinux

Highly Voted 1 year ago

Given answer is WRONG, i am NOT sure why no contribution from others on this point considering it is fundamentals of Azure FD 1- First thing to know is this is fresh install i.e. FD is NOT associated with App services 2- To know is that Both the FD and App services already have A records registered to them by MS and are accessible via internet 3- Third Party DNS provider is being utilized and NOT azure managed DNS 4- The domain contoso.com is already registered and has the relevant DNS records following in next paragraph

upvoted 25 times

Lazylinux

1 year ago

Adding further So based on the above and the link provided 1- I dont see any reason to create A record for any other the services being mentioned 2- Both TXT and CNAME are required in order to use custom Domain name with Azure FD 3- TXT is used to verify ownership of the domain, since we are suing third party DNS host/registrar and hence you must manually validate the domain by entering prompted DNS TXT records. 4- CNAME is used to point the custom domain to Azure FD azurefd.net. Remember the default frontend host will have a subdomain of azurefd.net when you first deploy Azure FD and associate to any Internet facing service

upvoted 23 times

Lazylinux

1 year ago

and hence the answer should be CNAME and TXT DNS records and second box is key vault https://learn.microsoft.com/en-us/azure/frontdoor/standard-premium/how-to-add-custom-domain#add-a-new-custom-domain https://learn.microsoft.com/en-us/azure/frontdoor/front-door-how-to-onboard-apex-domain?pivots=front-door-standard-premium

upvoted 31 times

...

MattM70

Highly Voted 1 year ago

I believe the answer is: DNS records: A CNAME and a TXT record See link: https://learn.microsoft.com/en-us/azure/frontdoor/standard-premium/how-to-add-custom-domain#prerequisites Import the certificate to: Vault1 See link: https://learn.microsoft.com/en-us/azure/frontdoor/standard-premium/how-to-configure-https-custom-domain?tabs=powershell#using-your-own-certificate

upvoted 6 times

...