The certificate is an enterprise certificate and not a public certificate so you must upload the root certificate to the Application Gateway. There is no typo, it's HTTP settings. https://docs.microsoft.com/en-us/azure/application-gateway/self-signed-certificates#upload-the-root-certificate-to-application-gateways-http-settings

Think there's a typo in answer D, shoud be HTTPS settings. Under HTTPS Settings: Choose a certificate - Select Upload a certificate. https://docs.microsoft.com/en-us/azure/application-gateway/create-ssl-portal#configuration-tab

https://learn.microsoft.com/en-us/azure/application-gateway/end-to-end-ssl-portal#:~:text=Add%20authentication/root%20certificates%20of%20backend%20servers

There are the following settings for Https settings and NOT http as it is none secure port 80 hence dont need cert - so for https port 443 it is as per below Https Settings Choose a certificate (you can chose upload file or key vault if set up and preferably use key vault to manage certs) Upload a certificate Choose a certificate from Key Vault Cert name (here you can call it anything you like even Bill Gates!!) PFX certificate file - if you are uploading and NOT using key vault Password - is password for the PFX file

correct answer

You need to upload .pfx file in Http Setting.

D is the right answer

Appeared on exam 6/27/2022

The Answer is correct. To create a new application gateway with end-to-end TLS encryption, you'll need to first enable TLS termination while creating a new application gateway. This action enables TLS encryption for communication between the client and application gateway. Then, you'll need to put on the Safe Recipients list the certificates for the back-end servers in the HTTP settings. This configuration enables TLS encryption for communication between the application gateway and the back-end servers. That accomplishes end-to-end TLS encryption.

D. Upload the public key certificate to the HTTP settings

This question was on the exam on 18th Feb 2022.

To ensure that the application gateway provide end-to-end encryption, SSL must be enabled Answer - B

Came on exam 28/Jan/22

Not on exam 1/6/2022

little confused, documentation says first enable TLS and then upload cert to listener. Is option B incorrect because it says enable SSL instead of TLS?

Web page does say to use HTTPS https://docs.microsoft.com/en-us/azure/application-gateway/self-signed-certificates#upload-the-root-certificate-to-application-gateways-http-settings

Correct as described here: https://docs.microsoft.com/en-us/azure/application-gateway/self-signed-certificates. There is no need to upload if using a well-known certificate (public)