An administrator configures a time-based sign-in-frequency policy for AVD SSO. A user keeps an established desktop session open beyond the interval and expects Windows to sign out immediately. What behavior should the administrator explain?

✓ Correct answer

• Expiry does not interrupt the established session; reauthentication is evaluated when a new token is needed.

Sign-in frequency controls reauthentication at a relevant token request, not an automatic logoff timer for an already established desktop. Separate Windows session time-limit policies control disconnect/logoff behavior. Option explanations: A. The interval automatically logs off every established Windows session.: Sign-in frequency is not a Windows session logoff policy. B. The AVD service must interrupt the session on its next diagnostic request.: A service diagnostic request is not the stated automatic termination mechanism. C. The existing session's cached token permanently exempts future launches from Conditional Access.: Cached state does not permanently override future sign-in-frequency and Conditional Access evaluation. D. Expiry does not interrupt the established session; reauthentication is evaluated when a new token is needed.: This matches the documented distinction between session continuity and token reauthentication. Sources: Enforce Microsoft Entra multifactor authentication for Azure Virtual Desktop using Conditional Access — https://learn.microsoft.com/en-us/azure/virtual-desktop/set-up-mfa

Read the source reference