Practice question 98 of 180 · medium
A user already signs in to an AVD desktop through Entra SSO. A web application inside the session must authenticate using the user's locally attached FIDO device. The client, host OS, and application support WebAuthn redirection. Which host-pool RDP property enables that in-session path?
Choose the single best answer.
Show the answer and explanation
✓ Correct answer
- redirectwebauthn:i:1
WebAuthn redirection forwards the in-session authentication challenge to the local device. Host SSO, smart-card redirection, and drive redirection serve different purposes. Option explanations: A. drivestoredirect:s:*: Drive redirection exposes local storage rather than forwarding authenticator challenges. B. redirectwebauthn:i:1: This property enables supported in-session WebAuthn redirection. C. enablerdsaadauth:i:1: This enables Entra SSO to Windows, which is already functioning and is a different authentication stage. D. redirectsmartcards:i:1: Smart-card redirection is not the WebAuthn redirection setting for a local FIDO challenge. Sources: Supported identities and authentication methods — https://learn.microsoft.com/en-us/azure/virtual-desktop/authentication
Read and review here, or open the app to practise and save your results on this device.
Unofficial study aid, not affiliated with or endorsed by Microsoft. Original educational practice questions, not official exam questions or a prediction of an exam result. Use Microsoft Learn and hands-on labs alongside this course.