Exam AZ-700 topic 1 question 20 discussion

Given answer and all the discussions are incorrect. 1. Create an SSL profile 2. Upload a certificate 3. Add an HTTP listener and associate the listener to the profile 4. Create a routing rule The question says you already deploy an App Gateway and configure a listener and a routing rule. You can't deploy a listener without a frontend IP so that assumes you already have one. Listener needs a routing rule otherwise it's useless.

what is going on here?

Step 1: From an on-prem computer, upload a certificate to AppGwy1 Step 2: From AppGwy1, create an SSL profile Step 3: From AppGwy1, add an HTTP listener and associate the listener with the SSL profile Step 4: From AppGwy1, create a fronten IP Configuration

You need to upload the cert first since it is then referenced when creating the ssl profile. And after that creating a listener must reference the ssl profile. Lastly you create a route as illustrated in the powershell example. 1. upload cert 2. create ssl profile 3. add listener 4. create routing rule https://learn.microsoft.com/en-us/azure/application-gateway/mutual-authentication-powershell#configure-client-authentication https://learn.microsoft.com/en-us/azure/application-gateway/mutual-authentication-powershell#configure-the-rule The frontend IP is already there since you need it when creating a listener and a previous HTTP listener was already created so the frontend ip config must exist

Step 1: From an on-prem computer, upload a certificate to AppGwy1 Step 2: From AppGwy1, create an SSL profile Step 3: From AppGwy1, add an HTTP listener and associate the listener with the SSL profile Step 4: From AppGwy1, create a routing rule

fontend IP, create SSL profile, upload a cert, associate the listener to the profile

Based on the URL below and fact the existing listener is http and NOT https and fact the fronted IP is created part of the Listener creation the the correct answer is as per below and mentioned by others 1. Create an SSL profile 2. Upload a certificate 3. Add an HTTP listener and associate the listener to the profile 4. Create a routing rule https://learn.microsoft.com/en-us/azure/application-gateway/mutual-authentication-portal

trick question. anything with HTTP (missing S as in HTTPS) is there to lure, disturb and distract. Hence the option with HTTP listener is out of question, leaving: 1 create frontend ip 2 create ssl profile 3 upload cert 4 create routing rule (even though some steps are taken in the beginning, nothing says that you must use that specific configuraton)

such discussions, much confusion

appears on exam, 19 Sept 2023

Appeared on Exam 26 Aug 2023

The given answer is correct! 1. From AppGwy1, create a frontend IP configuration. 2. From AppGwy1, create an SSL profile. 3. From an on-premises computer, upload a certificate to AppGwy1. 4. From AppGwy1, add an HTTP listener and associate the listener to the SSL Profile. https://learn.microsoft.com/en-us/azure/application-gateway/mutual-authentication-portal

Answer is correct: https://learn.microsoft.com/en-us/azure/application-gateway/mutual-authentication-portal

Given answer is correct!

The given answer is correct

1. From AppGwy1, create a frontend IP configuration 2. From AppGwy1, create a routing rule 3. From an on-premises computer, upload a certificate to AppGwy1 4. From AppGwy1, add an HTTP listener and associate the listener to the SSL Profile

https://learn.microsoft.com/en-us/azure/application-gateway/mutual-authentication-portal