AZ-204 Quiz

App Service

Question:

In Azure App Service Health Checks, when using your own authentication system, how can you authenticate the health check request and ensure that it is originating from the App?

By restricting application access through IP restrictions and validating that the x-ms-auth-internal-token request header matches the WEBSITE_AUTH_ENCRYPTION_KEY environment variable.
By restricting application access through IP restrictions.
By restricting application access through IP restrictions and validating that the x-ms-auth-internal-token request header matches the SHA256 hash of the WEBSITE_AUTH_ENCRYPTION_KEY environment variable.
By using a Virtual Network to restrict application access and validating that the x-ms-auth-internal-token request header is present.
By allowing anonymous access to the Health check path
By encrypting the WEBSITE_AUTH_ENCRYPTION_KEY environment variable with a client certificate.
By allowing anonymous access to the Health check path and validating that the x-ms-auth-internal-token request header matches the SHA256 hash of the WEBSITE_AUTH_ENCRYPTION_KEY environment variable.
By allowing anonymous access to the Health check path and validating that the x-ms-auth-internal-token request header matches the WEBSITE_AUTH_ENCRYPTION_KEY environment variable.

Answer:

For private endpoints check if x-ms-auth-internal-token request header equals the hashed value of WEBSITE_AUTH_ENCRYPTION_KEY environment variable. You should first use features such as IP restrictions, client certificates, or a Virtual Network to restrict application access.

Report a problem

Exam revision: April 11, 2025