Correct Answer: Assign the 'Desktop Virtualization Power On Contributor' role to the Windows Virtual Desktop enterprise application on the Azure subscription.
For 'Start VM on connect' to function, the AVD service (represented by the Windows Virtual Desktop enterprise application service principal) must have permission to power on the VM...
Correct Answer
Assign the 'Desktop Virtualization Power On Contributor' role to the Windows Virtual Desktop enterprise application on the Azure subscription.
Why This Answer Is Correct
For 'Start VM on connect' to function, the AVD service (represented by the Windows Virtual Desktop enterprise application service principal) must have permission to power on the VMs in your subscription. This is granted via the Desktop Virtualization Power On Contributor custom or built-in role.
This question evaluates your knowledge of Azure Virtual Desktop Security — a core concept tested in Microsoft Certified: Azure Virtual Desktop Specialty (AZ-140). Understanding Azure Virtual Desktop Security is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You want to prevent remote users from taking screenshots or using screen recording tools to capture sensitive company data displayed within an Azure Virtual Desktop session. Which host pool security configuration should you enable?
You want to secure your Azure Virtual Desktop environment by restricting session hosts from accessing the public internet, while still allowing them to communicate with the Azure Virtual Desktop control plane. Which tool or approach should you use?
You need to enforce multi-factor authentication (MFA) for all users accessing Azure Virtual Desktop from outside the corporate network. Which Azure service is used to define and enforce this policy?
You want to use Azure Active Directory (Entra ID) features to block logins to Azure Virtual Desktop if a user is logging in from a country where your company does not operate. What should you configure?