Https health monitor required authentication to work but back-end servers do not need authentication

Good question. The only significant difference between a built-in monitor and a command line tool is "who" is doing the work. The built-in monitors general use data plane processes, while command line tools use the management plane CPUs. Otherwise the built-in HTTP monitor will do the same thing the cURL command will do.