Question 25

Question

DRAG DROP You have an Azure Virtual Desktop deployment. You plan to use a Conditional Access policy to enforce multi-factor authentication (MFA) when users connect to the deployment. The solution must meet the following requirements: • Enforce MFA when a user connects to Azure Virtual Desktop by using a subscription feed. • Enforce MFA when a user authenticates to a session host that has single sign-on (SSO) enabled. You need to identify which cloud apps to use for the Conditional Access policy. Which app should you use for each requirement? To answer, drag the appropriate apps to the correct requirements. Each app may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/AZ-140/page_160_img_1.jpg

Ben X. · Answer

Azure Virtual Desktop -> subscription feed, Azure Windows VM Sign-in -> SSO session host. 100% matches what I've seen.

Mia · Answer

Had something like this in a mock, it's Azure Virtual Desktop for subscription feed and Azure Windows VM Sign-in for SSO session host.

SkepticalTester7821 · Answer

Azure Virtual Desktop for subscription feed, Azure Windows VM Sign-in for SSO session host. Each app lines up with the respective auth point where Conditional Access kicks in for MFA. Pretty sure this matches what MS docs recommend.

SaraT · Answer

Option D No way it's A here, that's more about types not blocking logins if the profile isn't ready.

Riley · Answer

Azure Virtual Desktop for feed connection, Microsoft Remote Desktop for SSO session host. I thought Remote Desktop handled auth when connecting via SSO, since it's the client app, but maybe I'm mixing it up. Not totally sure about the SSO part here, open to corrections.

Microsoft AZ-140 Real Exam Questions [October 2026 Update] Quiz

Premium Access Includes