A. Correct.
App Service Authentication, often called Easy Auth, can require Microsoft Entra ID sign-in for Function App endpoints.

B. Incorrect.
Blob lifecycle management moves or deletes blobs and does not authenticate users to a function.

C. Incorrect.
Private DNS supports name resolution and does not enforce user sign-in.

D. Incorrect.
A function key is not equivalent to user authentication and should not be the only control for signed-in user access.

A. Incorrect.
The consumption model is serverless and shared; it is not the dedicated integration environment described.

B. Incorrect.
Traffic Manager is DNS-based routing and does not host Logic Apps.

C. Correct.
An Integration Service Environment provides dedicated capacity and VNet integration for Logic Apps.

D. Incorrect.
Static website hosting serves files from storage and does not run Logic Apps.

A. Incorrect.
TrackTrace records diagnostic trace messages, not numeric aggregate measurements as the primary purpose.

B. Correct.
TrackMetric records numeric measurements and aggregates for Application Insights analysis.

C. Incorrect.
TrackException records exceptions and is not for normal business metrics.

D. Incorrect.
TrackPageView records page view telemetry and is not the right method for a custom metric.

A. Incorrect.
The tenant value can select an authority but does not list delegated API permissions.

B. Incorrect.
redirect_uri tells the identity platform where to send the response, not which permission is requested.

C. Incorrect.
state helps protect request integrity and preserve app state, not define permissions.

D. Correct.
The scope parameter lists delegated permissions the client is requesting for an API.

A. Incorrect.
A Recovery Services vault stores backup and recovery data and does not manage API subscriptions.

B. Correct.
API Management products group APIs and define subscription requirements, approval, terms, and subscription limits.

C. Incorrect.
A scale set manages VM instances and does not define API Management access terms.

D. Incorrect.
Azure Files provides file shares and does not control API subscriptions.

A. Incorrect.
Azure Bastion provides secure VM access and is not a database migration service.

B. Incorrect.
Workbooks visualize monitoring data and do not migrate databases.

C. Correct.
Azure Database Migration Service can help migrate MongoDB workloads to Azure Cosmos DB.

D. Incorrect.
Front Door rules can shape HTTP traffic and do not move MongoDB data.

A. Incorrect.
Azure Policy exemptions do not solve browser cross-origin API restrictions.

B. Incorrect.
Boot diagnostics helps VM troubleshooting and has no effect on browser CORS checks.

C. Incorrect.
Storage immutability protects blobs from changes and does not configure API browser access.

D. Correct.
Cross-Origin Resource Sharing settings define which browser origins can call the API.

A. Correct.
Deployment slots let you deploy and test separate app versions and swap them into production.

B. Incorrect.
Blob snapshots preserve blob versions and do not provide app deployment environments.

C. Incorrect.
DNS TXT records can prove ownership but do not test application versions.

D. Incorrect.
A Recovery Services vault is for backup and site recovery data, not app release testing.

A. Incorrect.
Gremlin is for graph workloads, not MongoDB driver compatibility.

B. Correct.
Azure Cosmos DB for MongoDB lets applications use MongoDB protocol support with Cosmos DB.

C. Incorrect.
Table API is for key-value style table workloads and does not provide MongoDB driver compatibility.

D. Incorrect.
Azure Files API is not a Cosmos DB API.

A. Incorrect.
Table Storage stores NoSQL entities and does not accelerate web traffic.

B. Incorrect.
Service Health reports Azure service issues and does not route application traffic.

C. Correct.
Azure Front Door provides global HTTP/S load balancing, acceleration, health probing, and edge routing.

D. Incorrect.
Update Management helps patch machines and is not a global web routing service.