Exam AZ-700 topic 3 question 9 discussion

Actual exam question from Microsoft's AZ-700

Question #: 9
Topic #: 3

You have an Azure subscription that contains an Azure App Service app. The app uses a URL of https://www.contoso.com.
You need to use a custom domain on Azure Front Door for www.contoso.com. The custom domain must use a certificate from an allowed certification authority
(CA).
What should you include in the solution?

A. an enterprise application in Azure Active Directory (Azure AD)
B. Active Directory Certificate Services (AD CS)
C. Azure Key Vault
D. Azure Application Gateway

Show Suggested Answer

Suggested Answer: C 🗳️

by crawfish at Oct. 25, 2021, 11:49 p.m.

Comments

Submit Cancel

teamaws

Highly Voted 2 years, 8 months ago

Correct, use Key Vault with your own certificate https://docs.microsoft.com/en-us/azure/frontdoor/front-door-custom-domain-https#option-2-use-your-own-certificate

upvoted 10 times

walkwolf3

2 years, 7 months ago

Your own certificate means the certificate is issued by a CA.

upvoted 5 times

...

AdityaGupta

Highly Voted 1 year, 9 months ago

Selected Answer: C

The correct answer is C, but the explanation is - you must create a complete certificate chain with an allowed certificate authority (CA) that is part of the Microsoft Trusted CA List. And Azure Key Vault allows you to store your certificates securely. Azure Front Door uses this secure mechanism to get your certificate (Self Signed or CA Provided) and it requires a few extra steps. https://docs.microsoft.com/en-us/azure/frontdoor/front-door-custom-domain-https#option-2-use-your-own-certificate

upvoted 8 times

...