You have an AVD environment with session hosts joined to Microsoft Entra ID. You need to ensure that only users in the 'Finance' group can access the finance application, while other users can access the desktop. You have two application groups: one for the desktop and one for the finance app. What should you do?

Assign the 'Finance' group to the finance application group and all users to the desktop application group.

Assign all users to both application groups.

Create a separate host pool for the finance app.

Use a Conditional Access policy to restrict the finance app to the 'Finance' group.

What is the purpose of assigning users to application groups in Azure Virtual Desktop?

To manage the underlying session host VMs

To control which desktops or applications users can access

To configure network security rules

You have an Azure Virtual Desktop environment with session hosts joined to Microsoft Entra Domain Services. You need to grant a group of users local administrator rights on the session hosts so they can install applications. What should you do?

Use Group Policy to add the group to the local Administrators group on the session hosts

Assign the Desktop Virtualization Host Pool Contributor role to the users

Create a custom RBAC role that grants local admin permissions

Add the users to the AAD DC Administrators group in Microsoft Entra Domain Services

A government agency requires smart card authentication for all AVD access. They have a hybrid environment with AD DS and Microsoft Entra ID. They want to use the same smart cards for both the web client and the Windows session. What should you implement?

Enable passwordless phone sign-in with the Microsoft Authenticator app.

Configure certificate-based authentication in Microsoft Entra ID and on the session hosts.

Use FIDO2 security keys instead of smart cards.

Configure Windows Hello for Business with a PIN.

Microsoft Certified:Azure Virtual Desktop Specialty

Domain 2Objective 1

Plan and Implement Identity Integration AZ-140 Practice Questions (Page 7)

Part of the Plan and implement identity and security domain, which accounts for 15–20% of the AZ-140 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~6–13 in this domain), expect 3–7 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

7concepts

15–20%of the exam

Questions 31–34

31expert · hard
You have an AVD environment with session hosts joined to Microsoft Entra ID. You need to ensure that only users in the 'Finance' group can access the finance application, while other users can access the desktop. You have two application groups: one for the desktop and one for the finance app. What should you do?
Select an answer first
32foundation · easy
What is the purpose of assigning users to application groups in Azure Virtual Desktop?
Select an answer first
33application · medium
You have an Azure Virtual Desktop environment with session hosts joined to Microsoft Entra Domain Services. You need to grant a group of users local administrator rights on the session hosts so they can install applications. What should you do?
Select an answer first
34expert · hard
A government agency requires smart card authentication for all AVD access. They have a hybrid environment with AD DS and Microsoft Entra ID. They want to use the same smart cards for both the web client and the Windows session. What should you implement?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to AZ-140

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-140” is a trademark of its owner, used for identification only.

Plan and Implement Identity Integration AZ-140 Practice Questions (Page 7)

Questions 31–34

What is the purpose of assigning users to application groups in Azure Virtual Desktop?

You have an Azure Virtual Desktop environment with session hosts joined to Microsoft Entra Domain Services. You need to grant a group of users local administrator rights on the session hosts so they can install applications. What should you do?

A government agency requires smart card authentication for all AVD access. They have a hybrid environment with AD DS and Microsoft Entra ID. They want to use the same smart cards for both the web client and the Windows session. What should you implement?

Keep studying — Plan and implement identity and security