Question
Your on-premises network contains an Active Directory Domain Services (AD DS) domain named contoso.com that has an internal certification authority (CA).
You have an Azure subscription.
You deploy an Azure application gateway named AppGwy1 and perform the following actions:
- Configure an HTTP listener
- Associate a routing rule with the listener
You need to configure AppGwy1 to perform mutual authentication for requests from domain-joined computers to contoso.com.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Explanation
Mutual authentication on Application Gateway is configured through an SSL profile: you create the SSL profile under SSL settings and, on its Client Authentication tab, upload the trusted client CA certificate chain (here the internal CA certificate exported from an on-premises computer). You then add an HTTPS listener with Enable SSL Profile selected and choose that profile, because the existing listener has no SSL profile. Finally, a routing rule must be created for the new listener so requests reach the backend. A new frontend IP configuration is not needed because the gateway already has one.
