A company wants to require MFA for Azure Virtual Desktop connections only when users are accessing from outside the corporate network. They also want to block access from countries where the company does not operate. Which Conditional Access policy configuration should you use?

Create two separate Conditional Access policies: one for MFA on untrusted locations and one to block named locations for specific countries

Use Azure AD Identity Protection to block countries

Create a single Conditional Access policy that requires MFA for all locations and blocks specific countries

Create a single Conditional Access policy that requires MFA and blocks access from all locations

You need to allow a group of users to access a specific remote app published in Azure Virtual Desktop. The users are already in a Microsoft Entra group. What is the minimal configuration to grant access?

Add the Microsoft Entra group to the application group that contains the remote app

Grant the users Contributor permissions on the application group

Create a new application group and assign the users to it

Assign the users the Desktop Virtualization User role on the host pool

Your company uses Azure Virtual Desktop with session hosts joined to Microsoft Entra ID (Microsoft Entra join). Users sign in to their Windows 10 devices with Microsoft Entra ID. You want to provide single sign-on to Azure Virtual Desktop. What should you configure?

Enable Microsoft Entra Seamless SSO for the tenant

Configure the session hosts to trust the on-premises AD DS domain

Use Microsoft Entra ID with the Azure Virtual Desktop app and enable single sign-on in the client

Use Microsoft Entra Domain Services to provide SSO

To grant a support engineer the ability to assign Azure RBAC roles to other users for Azure Virtual Desktop resources, which role should be assigned?

Desktop Virtualization Contributor

Microsoft Certified:Azure Virtual Desktop Specialty

Domain 2Objective 1

Plan and Implement Identity Integration AZ-140 Practice Questions (Page 5)

Part of the Plan and implement identity and security domain, which accounts for 15–20% of the AZ-140 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~6–13 in this domain), expect 3–7 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

7concepts

15–20%of the exam

Questions 21–25

21application · medium
A company wants to require MFA for Azure Virtual Desktop connections only when users are accessing from outside the corporate network. They also want to block access from countries where the company does not operate. Which Conditional Access policy configuration should you use?
Select an answer first
22foundation · easy
Which authentication method is commonly used in government or high-security environments to provide certificate-based authentication for Azure Virtual Desktop?
Select an answer first
23application · medium
You need to allow a group of users to access a specific remote app published in Azure Virtual Desktop. The users are already in a Microsoft Entra group. What is the minimal configuration to grant access?
Select an answer first
24application · medium
Your company uses Azure Virtual Desktop with session hosts joined to Microsoft Entra ID (Microsoft Entra join). Users sign in to their Windows 10 devices with Microsoft Entra ID. You want to provide single sign-on to Azure Virtual Desktop. What should you configure?
Select an answer first
25foundation · easy
To grant a support engineer the ability to assign Azure RBAC roles to other users for Azure Virtual Desktop resources, which role should be assigned?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-140

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-140” is a trademark of its owner, used for identification only.