Which cloud app or action should a Conditional Access policy target to secure connections to Azure Virtual Desktop?

Microsoft Azure Virtual Desktop

A financial firm wants to eliminate passwords for AVD access. They have Windows 10/11 devices enrolled in Microsoft Intune and users have FIDO2 security keys. Which authentication method should you enable in Microsoft Entra ID to support this?

Windows Hello for Business with PIN and biometrics.

FIDO2 security keys as a passwordless authentication method.

Temporary Access Pass for initial sign-in only.

Certificate-based authentication with smart cards.

You have an AVD deployment with a host pool and an application group. A junior admin needs to assign users to the application group but must NOT be able to modify the host pool or workspace. What is the least-privilege role assignment?

Desktop Virtualization Workspace Contributor on the workspace.

Desktop Virtualization Application Group Contributor on the application group.

Desktop Virtualization User on the application group.

Desktop Virtualization Host Pool Contributor on the host pool.

Your organization uses Azure Virtual Desktop with session hosts joined to on-premises AD DS. Users are synced to Microsoft Entra ID. You want to enable single sign-on for users who are already signed in to their domain-joined Windows 10 devices. What should you configure?

Set up AD FS with Microsoft Entra ID

Enable Microsoft Entra Seamless SSO

Use Microsoft Entra Domain Services

Configure the session hosts to use Microsoft Entra Kerberos

Microsoft Certified:Azure Virtual Desktop Specialty

Domain 2Objective 1

Plan and Implement Identity Integration AZ-140 Practice Questions (Page 1)

Part of the Plan and implement identity and security domain, which accounts for 15–20% of the AZ-140 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~6–13 in this domain), expect 3–7 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

7concepts

15–20%of the exam

Questions 1–5

1foundation · easy
Which Azure role-based access control (RBAC) role is required to manage Azure Virtual Desktop session hosts in the Azure portal?
Select an answer first
2foundation · easy
Which cloud app or action should a Conditional Access policy target to secure connections to Azure Virtual Desktop?
Select an answer first
3application · medium
A financial firm wants to eliminate passwords for AVD access. They have Windows 10/11 devices enrolled in Microsoft Intune and users have FIDO2 security keys. Which authentication method should you enable in Microsoft Entra ID to support this?
Select an answer first
4application · medium
You have an AVD deployment with a host pool and an application group. A junior admin needs to assign users to the application group but must NOT be able to modify the host pool or workspace. What is the least-privilege role assignment?
Select an answer first
5application · medium
Your organization uses Azure Virtual Desktop with session hosts joined to on-premises AD DS. Users are synced to Microsoft Entra ID. You want to enable single sign-on for users who are already signed in to their domain-joined Windows 10 devices. What should you configure?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-140

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-140” is a trademark of its owner, used for identification only.