You are setting up Azure Virtual Desktop using Entra ID (Azure AD) joined session hosts. You want to use Azure Files for FSLogix profiles. What authentication protocol must be enabled on the Azure Files storage account to support Entra ID joined session hosts?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Kerberos authentication for hybrid identities

To support FSLogix on Entra ID joined session hosts without a local domain controller, you must configure Azure Files with Azure AD Kerberos authentication for hybrid identities, e...

📋Part of Microsoft Certified: Azure Virtual Desktop Specialty (AZ-140) · Azure Certification Practice
Real Exam ScenarioAzure Virtual Desktop Identities & Joining

You are setting up Azure Virtual Desktop using Entra ID (Azure AD) joined session hosts. You want to use Azure Files for FSLogix profiles. What authentication protocol must be enabled on the Azure Files storage account to support Entra ID joined session hosts?

✓ Correct Answer & ExplanationAzure Virtual Desktop Identities & Joining

Correct Answer

Kerberos authentication for hybrid identities

Why This Answer Is Correct

To support FSLogix on Entra ID joined session hosts without a local domain controller, you must configure Azure Files with Azure AD Kerberos authentication for hybrid identities, enabling seamless SMB access using Entra credentials.

📚 What This Question Tests

This question evaluates your knowledge of Azure Virtual Desktop Identities & Joining — a core concept tested in Microsoft Certified: Azure Virtual Desktop Specialty (AZ-140). Understanding Azure Virtual Desktop Identities & Joining is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.

All Microsoft Certified: Azure Virtual Desktop Specialty (AZ-140) Questions →Browse All Azure Exams →

More Azure Virtual Desktop Identities & Joining Practice Questions

You want to deploy Azure Virtual Desktop session hosts using Entra ID (formerly Azure AD) join without using active directory domain controllers (no AD DS or on-prem AD). Which client configuration or requirement must you fulfill for users to connect securely?

← Back to Microsoft Certified: Azure Virtual Desktop Specialty (AZ-140) Full Practice Hub