Practice question 95 of 180 · medium
A security team is introducing MFA policies for both AVD resource discovery and Windows session-host authentication. The pool uses Entra SSO, and the team will use separate compatible policies. Which authentication resources should those policies target?
Select all that apply. Every correct option and no extras are required for credit in the app.
Show the answer and explanation
✓ Correct answers
- Azure Virtual Desktop.
- Windows Cloud Login.
Azure Virtual Desktop governs service authentication such as feed and gateway activity. Windows Cloud Login governs the Windows token-authentication stage used by Entra SSO. Protect both stages with compatible policies. Option explanations: A. Windows 365 as a replacement for both AVD authentication targets.: Windows App can have a Windows 365 authentication dependency, but that application does not replace the two stated AVD authentication targets. B. Azure Virtual Desktop.: This is the documented target for AVD service MFA. C. Windows Cloud Login.: This is the documented SSO Windows-authentication resource. D. Azure Virtual Desktop Azure Resource Manager Provider.: The ARM Provider application is not the documented AVD MFA target. Sources: Enforce Microsoft Entra multifactor authentication for Azure Virtual Desktop using Conditional Access — https://learn.microsoft.com/en-us/azure/virtual-desktop/set-up-mfa
Read and review here, or open the app to practise and save your results on this device.
Unofficial study aid, not affiliated with or endorsed by Microsoft. Original educational practice questions, not official exam questions or a prediction of an exam result. Use Microsoft Learn and hands-on labs alongside this course.