AZ-500 · Question #590
You have an Azure subscription that contains an Azure App Services web app named WebApp1 and an Azure key vault named Vault1. Vault1 has the certificates shown in the following table. You plan to…
The correct answer is A. Cert1 and Cert2 only. Azure App Service requires certificates to be in PFX format for TLS bindings. Only Cert1 and Cert2 are in the required PFX format, making them suitable for WebApp1.
Question
Exhibits
Options
- ACert1 and Cert2 only
- BCert1 and Cert3 only
- CCert3 and Cert4 only
- DCert1, Cert2, Cert3, and Cert4
How the community answered
(65 responses)- A72% (47)
- B14% (9)
- C5% (3)
- D9% (6)
Why each option
Azure App Service requires certificates to be in PFX format for TLS bindings. Only Cert1 and Cert2 are in the required PFX format, making them suitable for WebApp1.
Cert1 is in PFX format with a private key, which is the required format for Azure App Service SSL/TLS bindings. Cert2 is also in PFX format with a private key; the 'Exportable private key: No' setting in Azure Key Vault does not prevent App Service's managed identity from retrieving the PFX content from the Key Vault secret for SSL binding.
Cert3 is in PEM format, which is not supported by Azure App Service for SSL/TLS bindings, making it unsuitable.
Cert3 and Cert4 are both in PEM format, which Azure App Service does not support for SSL/TLS bindings.
Cert3 and Cert4 are in PEM format, which Azure App Service does not support for SSL/TLS bindings, thus not all listed certificates can be added.
Concept tested: Azure App Service SSL certificate requirements and Key Vault integration
Source: https://learn.microsoft.com/en-us/azure/app-service/configure-ssl-certificate-key-vault?tabs=portal%2Cazurecli#requirements
Community Discussion
No community discussion yet for this question.