AZ-305 Design infrastructure solutions Practice Question
A company is deploying a web application on Azure App Service. The application must authenticate users with their Microsoft Entra ID credentials. The development team wants to use the Microsoft Authentication Library (MSAL) for authentication. Which App Service authentication feature should they use to simplify integration?
⚠ Common exam trap
The trap here is that candidates often overcomplicate the solution by choosing Azure API Management or Azure AD B2C, not realizing that App Service's built-in authentication feature is specifically designed to simplify integration with Microsoft Entra ID and MSAL without additional infrastructure.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure the App Service authentication / authorization feature to use Microsoft Entra ID
The App Service authentication / authorization feature (also known as Easy Auth) provides a built-in, code-free integration with Microsoft Entra ID. By enabling this feature and configuring it to use Microsoft Entra ID, the App Service automatically handles token validation, session management, and redirects, allowing the development team to use MSAL on the client side for sign-in without writing server-side authentication logic.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use Application Insights to capture authentication logs
Why it's wrong here
Application Insights is an application performance management service for telemetry, metrics, traces, logs, and custom events. It can capture authentication-related logs if you instrument it, but it cannot authenticate users, validate tokens, or act as an identity provider. Authentication logging alone does not secure the app, so this option does not implement authentication for App Service.
- ✗
Use Azure API Management to handle authentication
Why it's wrong here
Azure API Management is an API gateway that manages and secures APIs with policies, subscription keys, and OAuth2 validation at the gateway layer. However, it fronts back-end APIs, not the App Service application directly, and it does not handle the application's own authentication flow for users. Placing APIM just for authentication would add unnecessary complexity and still require a separate identity provider.
- ✗
Use Azure AD B2C for identity management
Why it's wrong here
Azure AD B2C is an identity service designed for customer-facing applications with consumer identities, social logins, and customizable sign-up and sign-in experiences. This company is deploying an internal corporate web application, so employee identities in Microsoft Entra ID are more appropriate. Using B2C would misdirect the identity management away from the enterprise directory and complicate integration with existing corporate accounts.
- ✓
Configure the App Service authentication / authorization feature to use Microsoft Entra ID
Why this is correct
Configuring the App Service authentication/authorization feature, also known as Easy Auth, is the correct approach because it natively integrates with Microsoft Entra ID and handles sign-in, token validation, and session management without custom code. It runs as a middleware layer in the platform, redirects unauthenticated users to Entra ID, and injects user claims into the application. This is the simplest, most secure method for an internal enterprise app.
Go deeper
Related to this question
About these practice questions
This AZ-305 question is part of Courseiva's 795-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-305 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-305 exam.