You are developing an Azure App Service REST API that will be called by an App Service web app. The API needs to read and update user profile data in Azure AD. Which two components should you use to implement this functionality? (Pick two.)

The Microsoft Graph API is the correct choice because it provides a unified programmatic interface to access data in Microsoft 365, including Azure AD user profiles. It allows your API to read and update user information. The Microsoft Authentication Library (MSAL) is essential for acquiring tokens from Azure AD, which are then used to authenticate and authorize calls to the Microsoft Graph API. MSAL handles the complexities of OAuth 2.0 and OpenID Connect, enabling your API to securely interact with Azure AD on behalf of the user. Azure API Management is incorrect because it's used for publishing, securing, and managing APIs, not for directly accessing user data in Azure AD. Azure Security Center is for cloud security posture management and threat protection, not for API development or identity integration. Azure Key Vault SDK is for securely storing and accessing secrets, keys, and certificates, not for interacting with Azure AD user profiles.