AZ-140: Configuring and Operating Microsoft Azure Virtual DesktopDemo

By Microsoft · Question Mode

QuestionQ223

Plan and implement identity and security

You have an Azure Virtual Desktop deployment with five session hosts.

Users work from offices in Seattle and Vancouver and connect to the session hosts over the internet.

You need to ensure that users can connect to the session hosts only from the Seattle and Vancouver offices.

What should you use?

  • A Conditional Access
  • B RDP Shortpath
  • C a network security group (NSG)
  • D Azure Firewall
Explanation

Microsoft Entra Conditional Access can evaluate a user's public IP-based network location through named locations. Defining the Seattle and Vancouver office egress IP ranges as named locations and applying a Conditional Access policy to Azure Virtual Desktop restricts connections to those offices. Azure Virtual Desktop uses reverse-connect transport by default, so inbound network rules on the session hosts do not control the normal client connection path.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!