Azure MFA:
Azure Multi-Factor Authentication can be used, and licensed, in a few different ways depending on your organization's needs. If you're using the AzureAD free tier, you can leverage the security defaults to enable MFA for all users. If you decide not to use these defaults, users assigned the Azure AD Global Administrator role can be configured to use multi-factor authentication. You can use MFA with or without a license, here's the comparison chart of the benefits for each tier.
-How to enable MFA
Vulnerability Assessment:
For this feature, you'll need to use a Standard Subscription. Vulnerability assessments are available for both Linux and Windows VMs, Azure SQL DB/Managed Instance, and Azure Container registry. For a full list of PaaS resources and VM coverage.
Web App accessible over HTTPS:
You can secure your custom DNS name with a TLS/SSL binding by upgrading to Production B1 App Service plan. For more info- pricing details and our complete documentation on App Services.
-How to Secure a custom DNS name with a TLS/SSL binding in Azure App Service
I hope this helps! Please let me know if you have any other questions.
Thank you for your time and patience.