Correct Answer: Configure an Azure Route Table with a virtual appliance or use Azure Firewall with the 'WindowsVirtualDesktop' service tag.
Azure Firewall provides the service tag WindowsVirtualDesktop to allow outbound traffic to AVD management endpoints. Alternatively, Network Security Groups can use the service tag ...
Correct Answer
Configure an Azure Route Table with a virtual appliance or use Azure Firewall with the 'WindowsVirtualDesktop' service tag.
Why This Answer Is Correct
Azure Firewall provides the service tag WindowsVirtualDesktop to allow outbound traffic to AVD management endpoints. Alternatively, Network Security Groups can use the service tag WindowsVirtualDesktop to restrict outbound internet access while maintaining control plane communication.
This question evaluates your knowledge of Azure Virtual Desktop Security — a core concept tested in Microsoft Certified: Azure Virtual Desktop Specialty (AZ-140). Understanding Azure Virtual Desktop Security is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You want to prevent remote users from taking screenshots or using screen recording tools to capture sensitive company data displayed within an Azure Virtual Desktop session. Which host pool security configuration should you enable?
You need to enforce multi-factor authentication (MFA) for all users accessing Azure Virtual Desktop from outside the corporate network. Which Azure service is used to define and enforce this policy?
You want to implement 'Start VM on Connect' for Azure Virtual Desktop to reduce costs. You enable the feature on the host pool. What Azure role assignment is required for this feature to work?
You want to use Azure Active Directory (Entra ID) features to block logins to Azure Virtual Desktop if a user is logging in from a country where your company does not operate. What should you configure?