A company has a hybrid identity environment with AD DS and Microsoft Entra ID. They want to deploy AVD with session hosts joined to Microsoft Entra ID to simplify management. However, some legacy applications on the session hosts require Kerberos authentication against AD DS. What should you do?

Use Microsoft Entra Kerberos to provide Kerberos tickets for AD DS.

Use Microsoft Entra Domain Services for the session hosts.

Configure the legacy apps to use Microsoft Entra ID authentication.

Join session hosts to AD DS instead of Microsoft Entra ID.

A company has AVD session hosts joined to Microsoft Entra ID. Users report they are prompted for credentials twice when connecting. You need to enable SSO. What should you configure?

Use a passwordless authentication method like FIDO2.

Set up a site-to-site VPN to an on-premises domain.

Enable Microsoft Entra Seamless SSO for the domain.

Configure the RDP properties to use the Entra ID token for authentication.

A company needs to deploy Azure Virtual Desktop with session hosts joined to an existing on-premises Active Directory Domain Services (AD DS) domain. Users are synchronized to Microsoft Entra ID. Which identity scenario should be used?

Microsoft Entra Domain Services only

AD DS with Microsoft Entra ID synchronization

For an Azure Virtual Desktop deployment using Microsoft Entra Domain Services, what must be configured on the session hosts to enable domain join?

A custom domain name in Microsoft Entra ID

DNS settings pointing to the managed domain

Microsoft Entra Connect synchronization

A site-to-site VPN to on-premises

A government agency requires smart card authentication for all Azure Virtual Desktop sessions. They use on-premises AD DS and have deployed Active Directory Federation Services (AD FS). They want to use the same smart cards for Azure Virtual Desktop. What should you configure?

Require MFA with a hardware token for all users

Configure Microsoft Entra ID to federate with AD FS and enable smart card authentication for the Azure Virtual Desktop app

Enable passwordless sign-in with Windows Hello for Business

Use Microsoft Entra Domain Services and configure smart card authentication on the managed domain

Microsoft Certified:Azure Virtual Desktop Specialty

Domain 2Objective 1

Plan and Implement Identity Integration AZ-140 Practice Questions (Page 6)

Part of the Plan and implement identity and security domain, which accounts for 15–20% of the AZ-140 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~6–13 in this domain), expect 3–7 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

7concepts

15–20%of the exam

Questions 26–30

26expert · hard
A company has a hybrid identity environment with AD DS and Microsoft Entra ID. They want to deploy AVD with session hosts joined to Microsoft Entra ID to simplify management. However, some legacy applications on the session hosts require Kerberos authentication against AD DS. What should you do?
Select an answer first
27application · medium
A company has AVD session hosts joined to Microsoft Entra ID. Users report they are prompted for credentials twice when connecting. You need to enable SSO. What should you configure?
Select an answer first
28foundation · easy
A company needs to deploy Azure Virtual Desktop with session hosts joined to an existing on-premises Active Directory Domain Services (AD DS) domain. Users are synchronized to Microsoft Entra ID. Which identity scenario should be used?
Select an answer first
29foundation · easy
For an Azure Virtual Desktop deployment using Microsoft Entra Domain Services, what must be configured on the session hosts to enable domain join?
Select an answer first
30expert · hard
A government agency requires smart card authentication for all Azure Virtual Desktop sessions. They use on-premises AD DS and have deployed Active Directory Federation Services (AD FS). They want to use the same smart cards for Azure Virtual Desktop. What should you configure?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-140

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-140” is a trademark of its owner, used for identification only.