DRAG DROP
You manage an Azure Web Site in Standard mode at the following address:
contoso.azurevvebsites.net.
Your company has a new domain for the site that needs to be accessible by Secure Socket
Layer (SSL) encryption.
You need to be able to add a custom domain to the Azure Web Site and assign an SSL
certificate.
Which three steps should you perform next in sequence? To answer, move the appropriate
actions from the list of actions to the answer area and arrange them in the correct order.
More than one order of answer choices may be correct You will receive credit for any of the
correct orders you select
Answer: 
Explanation:
Wrong should be:
2 1 5
1+6+4
3(says domain, not subdomain),2,4
Agree with Asswipe.
1 is wrong because its changing the domain the wrong. Its already contoso.azurevvebsites.net you don`t want to change it back to that.
Both these two orders are correct, But you cannot mix them
1 2 5
3 2 4
Root domain – the domain name that you reserved with the domain registrar (represented by the @ host record, typically). For example, contoso.com.
Subdomain – any domain that’s under your root domain. For example, http://www.contoso.com (represented by the www host record). You can map different subdomains of the same root domain to different apps in Azure.
The advantage of CNAME is that it persists across IP address changes. If you delete and recreate your app, or change from a higher pricing tier back to the Shared tier, your app’s virtual IP address may change. Through such a change, a CNAME record is still valid, whereas an A record requires an update.
IP based SSL associates a certificate with a domain name by mapping the dedicated public IP address of the server to the domain name. This requires each domain name (contoso.com, fabricam.com, etc.) associated with your service to have a dedicated IP address. This is the traditional method of associating SSL certificates with a web server. • SNI based SSL is an extension to SSL and Transport Layer Security (TLS) that allows multiple domains to share the same IP address, with separate security certificates for each domain. Most modern browsers (including Internet Explorer, Chrome, Firefox and Opera) support SNI, however older browsers may not support SNI. For more information on SNI, see the Server Name Indication article on Wikipedia.
https://azure.microsoft.com/en-in/documentation/articles/web-sites-custom-domain-name/
https://azure.microsoft.com/en-in/documentation/articles/web-sites-configure-ssl-certificate/