Custom domains and SSL in Azure - Practice Problems & Coding Challenges

Challenge - 5 Problems

❓ service_behavior

intermediate

How does Azure App Service handle SSL for custom domains?

You have added a custom domain to your Azure App Service. You want to secure it with SSL. What happens when you enable App Service Managed Certificate?

A Azure automatically provisions a free SSL certificate for the custom domain and renews it without manual intervention.

B You must upload your own SSL certificate; Azure does not provide any free certificates for custom domains.

C Azure provides a free SSL certificate but only for the default azurewebsites.net domain, not for custom domains.

D Azure requires you to purchase an SSL certificate from the Azure Marketplace before enabling SSL on custom domains.

💡 Hint

Think about how Azure simplifies SSL management for custom domains in App Service.

Azure App Service Managed Certificate automatically provisions and renews free SSL certificates for custom domains, making it easy to secure your app without manual certificate management.

❓ Configuration

intermediate

Which DNS record is required to map a custom domain to an Azure Web App?

You want to point your custom domain www.example.com to your Azure Web App. Which DNS record type should you create?

A Create an MX record pointing <code>www.example.com</code> to <code>yourapp.azurewebsites.net</code>.

B Create an A record pointing <code>www.example.com</code> to the IP address of your local machine.

C Create a TXT record with the value <code>yourapp.azurewebsites.net</code>.

D Create a CNAME record pointing <code>www.example.com</code> to <code>yourapp.azurewebsites.net</code>.

💡 Hint

Think about how domain names are linked to hostnames in DNS.

A CNAME record maps a domain name to another domain name, which is the correct way to point a custom domain to an Azure Web App's default domain.

❓ Architecture

advanced

Designing SSL for multiple custom domains on Azure Front Door

You have an Azure Front Door setup with multiple backend services. You want to serve three custom domains with SSL using Front Door. Which approach ensures all domains have valid SSL certificates managed by Azure?

A Use a wildcard SSL certificate purchased externally and upload it to Azure Front Door for all domains.

B Upload individual SSL certificates for each custom domain to Azure Front Door manually.

C Use Azure Front Door's built-in TLS/SSL certificate management to enable HTTPS for all custom domains without uploading certificates.

D Disable HTTPS on Azure Front Door and handle SSL termination on each backend service.

💡 Hint

Consider Azure Front Door's capabilities for SSL certificate management.

Azure Front Door can automatically manage SSL certificates for multiple custom domains, simplifying SSL management and ensuring secure HTTPS connections.

❓ security

advanced

What is the security risk of not enabling HTTPS on a custom domain in Azure App Service?

You have configured a custom domain for your Azure App Service but did not enable HTTPS. What is the main security risk?

A Azure will disable your custom domain until HTTPS is enabled.

B Data transmitted between users and your app can be intercepted or modified by attackers (man-in-the-middle attack).

C Your app will automatically block all HTTP traffic, causing service disruption.

D There is no security risk because Azure encrypts all traffic internally.

💡 Hint

Think about what HTTPS protects against in web communication.

Without HTTPS, data sent between users and your app is not encrypted, making it vulnerable to interception and tampering by attackers.

✅ Best Practice

expert

Optimizing SSL certificate renewal for multiple Azure App Services with custom domains

You manage 10 Azure App Services each with different custom domains. You want to automate SSL certificate renewal with minimal manual effort and cost. Which approach is best?

A Use Azure App Service Managed Certificates for each custom domain to get free automatic renewal without manual intervention.

B Purchase SSL certificates from a third-party provider and manually upload them to each App Service before expiration.

C Use a single wildcard SSL certificate covering all domains and upload it to each App Service manually.

D Disable SSL on all App Services and rely on HTTP only to avoid renewal complexity.

💡 Hint

Consider Azure's native features for SSL management and automation.

Azure App Service Managed Certificates provide free SSL certificates for custom domains with automatic renewal, reducing manual work and cost for multiple apps.