AZ-204 Develop Azure compute solutions Practice Question
You are deploying a microservice to Azure Container Apps. The service requires a custom domain and SSL/TLS certificate. Which resource should you configure to meet these requirements?
⚠ Common exam trap
A common mix-up: candidates assume a separate front-end service like Azure Front Door or Application Gateway is required for custom domains and SSL, when in fact Azure Container Apps environments natively support this at the ingress level, making those additional services redundant for this specific requirement.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Azure Container Apps environment with a custom domain and certificate attached
Azure Container Apps allows you to attach a custom domain and upload an SSL/TLS certificate directly at the environment level, which is the correct approach for securing a microservice with a custom domain. This configuration ensures that the Container App responds to HTTPS requests on your domain without needing an additional front-end service.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Azure Front Door with a custom domain
Why it's wrong here
Azure Front Door is a global, scalable entry point that provides advanced routing, WAF capabilities, and CDN integration. While it can certainly provide custom domains and SSL termination, deploying it solely for this purpose with a single Container App introduces unnecessary complexity and cost. Container Apps offers native custom domain support, making Front Door an architectural overkill when the primary requirement is simply exposing a microservice with a custom URL.
- ✓
Azure Container Apps environment with a custom domain and certificate attached
Why this is correct
Azure Container Apps natively supports binding custom domains directly to a container app's ingress, providing a streamlined and cost-effective solution. This feature includes integrated certificate management, allowing users to either upload their own TLS/SSL certificates or leverage free, automatically renewed managed certificates provided by Azure. This direct approach simplifies the configuration of secure HTTPS endpoints without requiring additional, external services, making it the most appropriate choice.
- ✗
Azure API Management in front of the Container App
Why it's wrong here
Azure API Management is a comprehensive solution designed for publishing, securing, transforming, and monitoring APIs, which includes custom domain support. While it could technically sit in front of a Container App and provide a custom domain, its primary purpose extends far beyond simple domain binding. Deploying API Management solely for this functionality adds significant operational overhead, increased cost, and introduces an unnecessary layer of complexity when the core requirement is met natively by Container Apps.
- ✗
Azure Application Gateway with SSL termination
Why it's wrong here
Azure Application Gateway is a Layer 7 load balancer and web application firewall typically used for routing traffic to backend pools of VMs, VMSS, or App Services within a virtual network. Although it offers SSL termination and custom domain capabilities, it is generally not the recommended or most efficient ingress solution for Azure Container Apps. Container Apps provides its own robust ingress and SSL management directly, making Application Gateway redundant and adding architectural complexity without proportional benefit.
Go deeper
Related to this question
About these practice questions
This AZ-204 question is part of Courseiva's 881-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-204 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-204 exam.