SC-100 · Question #148
You are a cloud security administrator, and you have been tasked with providing a security solution for an Azure App Service, a web app named web-App0. Web-App0 has the following requirements: Users…
The correct answer is A. Azure AD application. Registering an Azure AD application (App Registration) is the correct way to enable Azure AD authentication for an Azure App Service web app. The App Registration establishes a trust relationship between web-App0 and Azure AD, enabling OAuth 2.0/OIDC flows, and supports the…
Question
You are a cloud security administrator, and you have been tasked with providing a security solution for an Azure App Service, a web app named web-App0. Web-App0 has the following requirements:
Users will request access to web-App0 through the organization portal, and an internal stakeholder will approve. Authentication for users must be provided by Azure AD. What would be your recommended approach to enable AD authentication to web-app0?
Options
- AAzure AD application
- BAzure AD application proxy
- CMicrosoft Defender for 365
- DApplication Gateway
How the community answered
(37 responses)- A84% (31)
- B3% (1)
- C8% (3)
- D5% (2)
Explanation
Registering an Azure AD application (App Registration) is the correct way to enable Azure AD authentication for an Azure App Service web app. The App Registration establishes a trust relationship between web-App0 and Azure AD, enabling OAuth 2.0/OIDC flows, and supports the Entra ID Entitlement Management approval workflow described. Azure AD Application Proxy (B) is for publishing on-premises apps to external users, not for Azure-hosted apps. Microsoft Defender for 365 (C) is a security product. Application Gateway (D) is a load balancer/WAF and does not provide identity authentication.
Topics
Community Discussion
No community discussion yet for this question.