You have an App Service web app that is accessed via the custom domain www.contoso.com. You need to ensure that all client traffic to this domain is encrypted using TLS 1.2 or later. You have already uploaded a certificate to the App Service. What should you configure?

Add a binding for the custom domain with the uploaded certificate and set the minimum TLS version to 1.2.

Enable HTTPS Only in the App Service configuration.

Configure a network security group to allow only TLS 1.2 traffic to the App Service.

Set the minimum TLS version to 1.2 in the TLS/SSL settings of the App Service.

You need to ensure that clients connect to your Azure App Service using HTTPS with a custom domain. Which two tasks must you perform?

Add a custom domain and upload a TLS/SSL certificate

Enable the 'HTTPS Only' setting and create a deployment slot

Configure autoscale and add an access restriction

Create a virtual network and enable a private endpoint

Your company has an App Service web app that should only be accessible from the corporate network's public IP range 203.0.113.0/24. You need to restrict access to the app while allowing the corporate users to reach it via the custom domain app.contoso.com. What should you configure?

Configure a network security group on the subnet that hosts the App Service to allow only the corporate IP range.

Add an access restriction rule in the App Service networking settings that allows the IP range 203.0.113.0/24 and denies all other traffic.

Use Azure Front Door to restrict traffic to the corporate IP range and route only allowed traffic to the App Service.

Set the App Service to require client certificates and only issue certificates to corporate users.

A company wants to test a new version of their web app in a staging environment before swapping it to production. They have created a deployment slot named 'staging' and deployed the new version to it. After testing, they want to make the staging version the production version with zero downtime. What should they do?

Copy the staging app content to the production slot using FTP

Delete the production slot and rename the staging slot to production

Swap the staging slot with the production slot

Change the production slot's app settings to point to the staging URL

Microsoft Certified:Azure Administrator Associate

Domain 3Objective 5

Create and Configure Azure App Service AZ-104 Practice Questions (Page 6)

Part of the Deploy and manage Azure compute resources domain, which accounts for 20–25% of the AZ-104 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~8–16 in this domain), expect 2–3 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)

44questions here

9free pages

8concepts

20–25%of the exam

Questions 26–30

26application · medium
You have an App Service web app that is accessed via the custom domain www.contoso.com. You need to ensure that all client traffic to this domain is encrypted using TLS 1.2 or later. You have already uploaded a certificate to the App Service. What should you configure?
Select an answer first
27foundation · easy
You need to ensure that clients connect to your Azure App Service using HTTPS with a custom domain. Which two tasks must you perform?
Select an answer first
28application · medium
Your company has an App Service web app that should only be accessible from the corporate network's public IP range 203.0.113.0/24. You need to restrict access to the app while allowing the corporate users to reach it via the custom domain app.contoso.com. What should you configure?
Select an answer first
29application · medium
A company wants to test a new version of their web app in a staging environment before swapping it to production. They have created a deployment slot named 'staging' and deployed the new version to it. After testing, they want to make the staging version the production version with zero downtime. What should they do?
Select an answer first
30foundation · easy
Which App Service pricing tier is required to use deployment slots?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-104

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-104” is a trademark of its owner, used for identification only.

Create and Configure Azure App Service AZ-104 Practice Questions (Page 6)

Questions 26–30

You have an App Service web app that is accessed via the custom domain www.contoso.com. You need to ensure that all client traffic to this domain is encrypted using TLS 1.2 or later. You have already uploaded a certificate to the App Service. What should you configure?

You need to ensure that clients connect to your Azure App Service using HTTPS with a custom domain. Which two tasks must you perform?

Your company has an App Service web app that should only be accessible from the corporate network's public IP range 203.0.113.0/24. You need to restrict access to the app while allowing the corporate users to reach it via the custom domain app.contoso.com. What should you configure?

Which App Service pricing tier is required to use deployment slots?

Keep studying — Deploy and manage Azure compute resources