The correct options are Create a CNAME record that points to live-finapp.azurewebsites.net and Create an A record that maps the root domain to the public IPv4 address used by the App Service.

Create a CNAME record that points to live-finapp.azurewebsites.net is correct because a CNAME maps a subdomain such as www to the App Service default host name and it causes DNS to resolve the alias to the Azure hosted app name rather than to a static IP. This is the usual approach for non apex host names because it keeps the DNS entry pointing at the service name which can change.

Create an A record that maps the root domain to the public IPv4 address used by the App Service is correct because DNS does not allow a CNAME on the apex or root domain and the root must point to an IP address. Azure provides the App Service IP to use for the apex and you must create the A record to map the naked domain to that IP and then add the hostname binding in the App Service.

Create a TXT record to verify domain ownership with the registrar is incorrect because a TXT record only proves ownership or provides metadata and it does not cause the domain to resolve to the App Service by itself. Verification may be required during setup but the TXT does not replace the A or CNAME records needed for resolution.

Create an ALIAS record that points the apex domain to live-finapp.azurewebsites.net is incorrect in the context of standard Azure DNS configuration because the common and supported method is an A record for the apex. Some DNS providers offer ALIAS or ANAME flattening but that is not the standard Azure App Service workflow and the exam expects the A record approach for the root.

Full AWS Practitioner Certification Question