AZ-204 Develop Azure compute solutions Practice Question
You have an Azure App Service web app that uses a custom domain with TLS/SSL binding. You need to migrate the app to a new App Service plan in a different region. What is the correct order of steps?
⚠ Common exam trap
Many exam-takers think they can bind the domain and certificate before deploying the app, or that exporting the plan is optional, but Azure requires the app to be deployed and running to validate domain ownership and certificate binding.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Export the current plan, create the new plan, deploy the app, bind the domain and certificate
The proper sequence for migrating an Azure App Service web app with a custom domain and TLS/SSL binding to a new plan in a different region is: first, capture the existing web app's configuration (e.g., by exporting its ARM template, which includes custom domain and certificate binding details), then create the new App Service plan in the target region, deploy the app (which involves creating the new web app resource and deploying its code, potentially using the captured configuration), and finally bind the custom domain and certificate to the new web app. This ensures the custom domain and TLS/SSL binding are correctly associated with the new web app after it's deployed, avoiding downtime or misconfiguration.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Create the new plan, deploy the app, export the current plan, bind the domain
Why it's wrong here
This order is incorrect because deploying the application before exporting the current plan's configuration means critical settings like connection strings, application settings, and environment variables from the original app are not captured and applied to the new deployment. This will result in a non-functional or incorrectly configured application in the new plan. Furthermore, binding only the domain without its associated certificate will leave the custom domain insecure, requiring additional steps for HTTPS.
- ✗
Export the current plan, create the new plan, bind the domain, deploy the app
Why it's wrong here
This sequence is flawed because binding the custom domain to the new App Service *before* deploying the actual application content means the domain will point to an empty or default App Service. This will cause significant downtime and 'site not found' errors for users attempting to access the application. The application must be fully deployed and configured on the target App Service before the custom domain is pointed to it to ensure a seamless transition.
- ✗
Bind the domain to the new plan, export the current plan, create the new plan, deploy the app
Why it's wrong here
This option is incorrect as attempting to bind a custom domain to a 'new plan' before that App Service Plan and its associated App Service Web App have actually been created is technically impossible. The target resource must exist to receive the domain binding. This premature binding attempt also places the crucial steps of exporting the current configuration, creating the new plan, and deploying the application much too late in the process, ensuring the new environment is not ready.
- ✓
Export the current plan, create the new plan, deploy the app, bind the domain and certificate
Why this is correct
This is the correct order for migrating an App Service with a custom domain and certificate, ensuring minimal downtime and proper configuration. First, exporting the current plan captures all necessary application settings and environment variables. Next, creating the new App Service Plan and deploying the application with the exported configuration ensures the app is fully functional in the new environment. Finally, binding the custom domain and its TLS/SSL certificate ensures secure and uninterrupted service delivery to end-users.
Go deeper
Related to this question
About these practice questions
This AZ-204 question is part of Courseiva's 881-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-204 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-204 exam.