Exam AZ-304 All Questions

View all questions & answers for the AZ-304 exam

Exam AZ-304 topic 2 question 30 discussion

Actual exam question from Microsoft's AZ-304

Question #: 30
Topic #: 2

You deploy an Azure virtual machine that runs an ASP.NET application. The application will be accessed from the internet by the users at your company.
You need to recommend a solution to ensure that the users are pre-authenticated by using their Azure Active Directory (Azure AD) account before they can connect to the ASP.NET application.
What should you include in the recommendation?

A. a public Azure Load Balancer
B. Azure Application Gateway
C. Azure Traffic Manager
D. an Azure AD enterprise application

Show Suggested Answer

Suggested Answer: D 🗳️

by securitynija at March 14, 2021, 8:41 p.m.

Comments

Submit Cancel

dadageer

Highly Voted 4 years, 2 months ago

none of the other three answers made sense so I was left with D.

upvoted 30 times

...

LT

Highly Voted 4 years, 1 month ago

D is the answer.. No brainer. Other options are completely irrelevant.

upvoted 14 times

...

dasEnder

Most Recent 3 years ago

But how this is enforced? The application should then add the enforcement?!

upvoted 1 times

...

Azure_daemon

3 years, 1 month ago

The first 3 answers are totally irrelevant to the question, and D is the correct answer, I wish all the AZ exam questions was that easy

upvoted 2 times

...

Teringzooi

3 years, 1 month ago

Selected Answer: D

Correct answer: D leo_az300 6 months, 4 weeks ago The solution is to pre-authenticate user with AZURE AD account, then they can connect web app in azure. This makes sense to use service principal. You can manage service principals in the Azure portal through the Enterprise Applications experience.

upvoted 1 times

...

[Removed]

3 years, 5 months ago

Selected Answer: D

Only D can do authentication. Others are Load Balancers.

upvoted 2 times

...

examineezer

3 years, 5 months ago

From what I can gather, Enterprise applications are essentially Service Principals, which are instances of Application Objects, and can include definitions of role assignments.

upvoted 2 times

...

parkranger

3 years, 7 months ago

Main reason for Enterprise application usage - Applications have been able to leverage Windows Server Active Directory for user authentication for many years without requiring the application to be registered or recorded in the directory. Now the organization will have improved visibility to exactly how many applications are using the directory and for what purpose.

upvoted 3 times

...

leo_az300

3 years, 8 months ago

The solution is to pre-authenticate user with AZURE AD account, then they can connect web app in azure. This makes sense to use service principal. You can manage service principals in the Azure portal through the Enterprise Applications experience. So D is correct

upvoted 3 times

...

syu31svc

3 years, 8 months ago

Key here is "pre-authenticated" so answer is D

upvoted 1 times

...

Gautam1985

3 years, 9 months ago

correct

upvoted 1 times

...

AdityaGupta

3 years, 10 months ago

Can I not manage authentication with Application Gateway by using certificates?

upvoted 1 times

pentium75

3 years, 10 months ago

I don't think so. APPGW can proxy authentication requests between client and backend. But I'm not aware of a function that you authenticate to APPGW and THEN you can access the application behind it.

upvoted 1 times

...

Vipsao

4 years, 2 months ago

The answer is correct

upvoted 5 times

...

securitynija

4 years, 3 months ago

correct

upvoted 4 times

...