Skip to Content

AZ-700: How to Configure End-to-End TLS Encryption on Microsoft Azure Application Gateway?

Learn how to ensure secure communication for your web applications hosted on Microsoft Azure using the Application Gateway. Discover the necessary steps for configuring end-to-end TLS encryption, including setting up certificates and securing backend servers.

Table of Contents

Question

You plan to deploy a new web application that requires secure communication between users and backend servers. The application is hosted on Microsoft Azure using a Microsoft Application Gateway.
You need to configure Application Gateway for end-to-end TLS encryption.
Each correct answer presents part of the solution. Which three actions should you perform?

A. Configure a custom domain name.
B. Configure the listener with a certificate.
C. Enable HTTP to HTTPS redirection.
D. Set the Backend HTTP protocol to HTTPS.
E. Upload the backend server’s root certificate.
F. Use a wildcard certificate for the listener.

Answer

B. Configure the listener with a certificate.
D. Set the Backend HTTP protocol to HTTPS.
E. Upload the backend server’s root certificate.

Explanation

To achieve end-to-end TLS encryption, configuring the listener with a TLS/SSL certificate allows the gateway to handle TLS termination and re-encryption, ensuring secure communication. Setting the Backend HTTP protocol to HTTPS maintains encrypted traffic to backend servers, and uploading the backend server’s root certificate establishes trust for secure communication. Configuring a custom domain name, enabling HTTP to HTTPS redirection, and using a wildcard certificate do not contribute to encryption or compromise security.

Designing and Implementing Microsoft Azure Networking Solutions AZ-700 certification exam assessment practice question and answer (Q&A) dump including multiple choice questions (MCQ) and objective type questions, with detail explanation and reference available free, helpful to pass the Designing and Implementing Microsoft Azure Networking Solutions AZ-700 exam and earn Designing and Implementing Microsoft Azure Networking Solutions AZ-700 certification.