Enable HTTPS for Azure Web App | Microsoft AZ-500 Exam

Enable HTTPS for Azure Web App

Question

You have a web app hosted on an on-premises server that is accessed by using a URL of https://www.contoso.com.

You plan to migrate the web app to Azure. You will continue to use https://www.contoso.com.

You need to enable HTTPS for the Azure web app.

What should you do first?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

B

https://docs.microsoft.com/en-us/azure/app-service/configure-ssl-certificate#private-certificate-requirements

To enable HTTPS for an Azure web app, you need to obtain a SSL/TLS certificate that verifies the identity of your domain and encrypts traffic between your clients and the web app.

Option A: Exporting the public key from the on-premises server and saving it as a P7b file is not a valid approach to enable HTTPS for the Azure web app. This option only exports the public key of the SSL/TLS certificate, which is not sufficient to establish a secure HTTPS connection.

Option B: Exporting the private key from the on-premises server and saving it as a PFX file that is encrypted by using TripleDES is a valid approach to migrate the SSL/TLS certificate from the on-premises server to the Azure web app. The private key is required to decrypt the SSL/TLS certificate and establish a secure HTTPS connection. However, this option is not the first step in enabling HTTPS for the Azure web app.

Option C: Exporting the public key from the on-premises server and saving it as a CER file is not a valid approach to enable HTTPS for the Azure web app. This option only exports the public key of the SSL/TLS certificate, which is not sufficient to establish a secure HTTPS connection.

Option D: Exporting the private key from the on-premises server and saving it as a PFX file that is encrypted by using AES256 is a valid approach to migrate the SSL/TLS certificate from the on-premises server to the Azure web app. The private key is required to decrypt the SSL/TLS certificate and establish a secure HTTPS connection. However, this option is not the first step in enabling HTTPS for the Azure web app.

Therefore, the correct answer is to obtain a SSL/TLS certificate that verifies the identity of your domain and encrypts traffic between your clients and the web app. This can be achieved by purchasing a certificate from a trusted third-party certificate authority (CA) or by creating a self-signed certificate using tools like OpenSSL or the Azure portal. Once you obtain the SSL/TLS certificate, you can upload it to the Azure web app and configure HTTPS bindings for the custom domain name (www.contoso.com) to enable secure communication with the web app.