Question
You are creating the security recommendations for an Azure App Service web app named App1. App1 has the following specifications:
✑ Users will request access to App1 through the My Apps portal. A human resources manager will approve the requests.
✑ Users will authenticate by using Azure Active Directory (Azure AD) user accounts.
You need to recommend an access security architecture for App1.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Explanation
To enable Azure AD authentication for App1, use: Azure AD application. Registering App1 as an application in Azure AD (Microsoft Entra ID), for example through App Service authentication, lets users sign in with their Azure AD accounts and makes the app available as a tile in the My Apps portal. Application Proxy is for publishing on-premises apps, Application Gateway is a load balancer, and a managed identity lets the app itself authenticate to other resources, not users to the app.
To implement access requests for App1, use: An access package in Identity Governance. Entitlement management access packages let users request access in the My Apps portal and route each request through an approval policy, so a human resources manager can approve it. An access review recertifies existing access rather than handling new requests, and the Defender for Cloud Apps and Conditional Access App Control options control sessions, not access requests.
