update to new screenshots

Author: cephalin

articles/app-service/app-service-web-tutorial-custom-domain.md

@@ -110,10 +110,13 @@ For a wildcard name like `*` in `*.contoso.com`, create two records according to
 
     :::image type="content" source="./media/app-service-web-tutorial-custom-domain/configure-custom-domain-validate.png" alt-text="A screenshot showing how to validate your DNS record settings in the Add a custom domain dialog." border="true":::
 
-1. If the **Domain validation** section shows green check marks next for both domain records, then you've configured them correctly. Select **Add**. If it shows any red X, fix any errors in the DNS record settings in your domain provider's website.
+1. If the **Domain validation** section shows green check marks next for both domain records, then you've configured them correctly. Select **Add**. If you see any errors or warnings, fix it in the DNS record settings on your domain provider's website.
 
     :::image type="content" source="./media/app-service-web-tutorial-custom-domain/configure-custom-domain-add.png" alt-text="A screenshot showing the Add button activated after validation." border="true":::
 
+    > [!NOTE]
+    > If you configured the TXT record but not the A or CNAME record, App Service treats it as a [domain migration](manage-custom-dns-migrate-domain.md) scenario and allows the validation to succeed, but you won't see green check marks next to the records.
+
 1. You should see the custom domain added to the list. You may also see a red X with **No binding**. 
 
     If you selected **App Service Managed Certificate** earlier, wait a few minutes for App Service to create the managed certificate for your custom domain. When the process is complete, the red X becomes a green check mark with **Secured**. If you selected **Add certificate later**, this red X will remain until you [add a private certificate for the domain](configure-ssl-certificate.md) and [configure the binding](configure-ssl-bindings.md).

articles/app-service/manage-custom-dns-migrate-domain.md

@@ -61,29 +61,29 @@ Add a TXT record for domain verification. The hostname for the TXT record depend
 
 1. For **Domain provider**, select **All other domain services** to configure a third-party domain.
 
-1. For **TLS/SSL certificate**, select **App Service Managed Certificate** if your app is in **Basic** tier or higher. If you want to remain in **Shared** tier, select **Add certificate later**.
+1. For **TLS/SSL certificate**, select **Add certificate later**. You can add an App Service managed certificate after you have completed domain migration.
 
 1. For **TLS/SSL type**, select the binding type you want.
 
     [!INCLUDE [Certificate binding types](../../includes/app-service-ssl-binding-types.md)]
 
 1. Type the fully qualified domain name you want to migrate, that corresponds to the TXT record you created, such as `contoso.com`, `www.contoso.com`, or `*.contoso.com`.
 
-    :::image type="content" source="./media/app-service-web-tutorial-custom-domain/configure-custom-domain.png" alt-text="A screenshot showing how to configure a new custom domain, along with a managed certificate." border="true":::
+    :::image type="content" source="./media/app-service-web-tutorial-custom-domain/configure-custom-domain-preempt.png" alt-text="A screenshot showing how to configure a new custom domain, along with a managed certificate." border="true":::
 
 1. Select **Validate**. Although the dialog shows two records you need for the custom domain to be functional for your app, the validation passes with just the domain verification ID (the TXT record).
 
     :::image type="content" source="./media/app-service-web-tutorial-custom-domain/configure-custom-domain-validate.png" alt-text="A screenshot showing how to validate your DNS record settings in the Add a custom domain dialog." border="true":::
 
 1. If the **Domain validation** section shows green check marks, then you've configured the domain verification ID correctly. Select **Add**. If it shows any red X, fix any errors in your domain provider's website.
 
-    :::image type="content" source="./media/app-service-web-tutorial-custom-domain/configure-custom-domain-add.png" alt-text="A screenshot showing the Add button activated after validation." border="true":::
+    :::image type="content" source="./media/app-service-web-tutorial-custom-domain/configure-custom-domain-preempt-add.png" alt-text="A screenshot showing the Add button activated after validation." border="true":::
 
 1. You should see the custom domain added to the list. You may also see a red X with **No binding**. 
 
-    If you selected **App Service Managed Certificate** earlier, wait a few minutes for App Service to create the managed certificate for your custom domain. When the process is complete, the red X becomes a green check mark with **Secured**. If you selected **Add certificate later**, this red X will remain until you [add a private certificate for the domain](configure-ssl-certificate.md) and [configure the binding](configure-ssl-bindings.md).
+    Sinc you selected **Add certificate later**, you see a red X with **No binding**. It will remain until you [add a private certificate for the domain](configure-ssl-certificate.md) and [configure the binding](configure-ssl-bindings.md).
 
-    :::image type="content" source="./media/app-service-web-tutorial-custom-domain/add-custom-domain-complete.png" alt-text="A screenshot showing the custom domains page with the new secured custom domain." border="true":::
+    :::image type="content" source="./media/app-service-web-tutorial-custom-domain/add-custom-domain-preempt-complete.png" alt-text="A screenshot showing the custom domains page with the new secured custom domain." border="true":::
 
     > [!NOTE]
     > Unless you configure a certificate binding for your custom domain, Any HTTPS request from a browser to the domain will receive an error or warning, depending on the browser.
@@ -96,7 +96,7 @@ The only thing left to do is remapping your active DNS record to point to App Se
 
 1. **(A record only)** You need the App Service app's external IP address. In the **Custom domains** page, copy the app's IP address.
 
-    :::image type="content" source="./media/app-service-web-tutorial-custom-domain/mapping-information.png" alt-text="A screenshot showing how to copy the App Service app's external IP address." border="true":::
+    :::image type="content" source="./media/app-service-web-tutorial-custom-domain/mapping-information-migrate.png" alt-text="A screenshot showing how to copy the App Service app's external IP address." border="true":::
 
 1. Back in the DNS records page of your domain provider, select the DNS record to remap.
 
@@ -112,7 +112,16 @@ The only thing left to do is remapping your active DNS record to point to App Se
 
 DNS queries should start resolving to your App Service app immediately after DNS propagation happens.
 
-## Migrate domain from another app
+## Frequently asked questions
+
+- [Can I add a App Service managed certificate when migrating a live domain?](#can-i-add-a-app-service-managed-certificate-when-migrating-a-live-domain)
+- [How do I migrate a domain from another app?](#how-do-i-migrate-a-domain-from-another-app)
+
+## Can I add a App Service managed certificate when migrating a live domain?
+
+You can add an App Service managed certificate to a migrated live domain, but only after you [remap the active DNS name](#4-remap-the-active-dns-name). To add the App Service managed certificate, see [Create a free managed certificate](configure-ssl-certificate.md#create-a-free-managed-certificate).
+
+## How do I migrate a domain from another app?
 
 You can migrate an active custom domain in Azure, between subscriptions or within the same subscription. However, such a migration without downtime requires the source app and the target app are assigned the same custom domain at a certain time. Therefore, you need to make sure that the two apps aren't deployed to the same deployment unit (internally known as a webspace). A domain name can be assigned to only one app in each deployment unit.