AZ104-Q: map a secure custom web domain
A company wants
www.contoso.exampleto serve an Azure App Service over HTTPS using its existing DNS name. What is required?
- A) An NSG on the App Service plan.
- B) A storage-account SAS token.
- C) A VM extension on the web app.
- D) A validated custom-domain mapping in App Service and a matching DNS record, then a TLS certificate binding for HTTPS. ✓
Answer: D. The DNS record directs the hostname to the app, App Service validates/binds the custom domain, and the certificate binding provides TLS for that hostname.
Why not the others: NSGs, SAS tokens, and VM extensions do not configure an App Service hostname/TLS binding.