You are configuring FSLogix Profile Containers using Azure Files. You want to implement NTFS permissions on the file share. Which Active Directory credential configuration is supported for securing Azure Files access directly from AVD session hosts?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Active Directory Domain Services (AD DS) or Microsoft Entra Domain Services (formerly Azure AD DS)

To secure FSLogix shares on Azure Files using NTFS permissions (share-level and directory-level), the Azure File share must be integrated with AD DS or Entra Domain Services. Nativ...

๐Ÿ“‹Part of Microsoft Certified: Azure Virtual Desktop Specialty (AZ-140) ยท Azure Certification Practice
Real Exam ScenarioAzure Virtual Desktop Storage & FSLogix

You are configuring FSLogix Profile Containers using Azure Files. You want to implement NTFS permissions on the file share. Which Active Directory credential configuration is supported for securing Azure Files access directly from AVD session hosts?

โœ“ Correct Answer & ExplanationAzure Virtual Desktop Storage & FSLogix

Correct Answer

Active Directory Domain Services (AD DS) or Microsoft Entra Domain Services (formerly Azure AD DS)

Why This Answer Is Correct

To secure FSLogix shares on Azure Files using NTFS permissions (share-level and directory-level), the Azure File share must be integrated with AD DS or Entra Domain Services. Native Entra ID (cloud-only) does not natively authenticate SMB access from session hosts using Kerberos unless hybrid/Kerberos is configured.

๐Ÿ“š What This Question Tests

This question evaluates your knowledge of Azure Virtual Desktop Storage & FSLogix โ€” a core concept tested in Microsoft Certified: Azure Virtual Desktop Specialty (AZ-140). Understanding Azure Virtual Desktop Storage & FSLogix is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.