exam questions

Exam AZ-140 All Questions

View all questions & answers for the AZ-140 exam

Exam AZ-140 topic 3 question 4 discussion

Actual exam question from Microsoft's AZ-140
Question #: 4
Topic #: 3
[All AZ-140 Questions]

HOTSPOT -
Your company has the offices shown in the following table.

The company has an Azure Active Directory (Azure AD) tenant named contoso.com that contains a user named User1.
Users connect to a Azure Virtual Desktop deployment named WVD1. WVD1 contains session hosts that have public IP addresses from the 52.166.253.0/24 subnet.
Contoso.com has a conditional access policy that has the following settings:
✑ Name: Policy1
✑ Assignments:
- Users and groups: User1
- Cloud apps or actions: Azure Virtual Desktop
✑ Access controls:
- Grant: Grant access, Require multi-factor authentication
✑ Enable policy: On
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-azure-mfa

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
SCT
Highly Voted 3 years, 6 months ago
Yes, Yes, No
upvoted 27 times
...
Karl_Anthony_Towns
Most Recent 6 months, 3 weeks ago
Yes Yes No
upvoted 1 times
...
ESAJRR
1 year, 3 months ago
Yes Yes No
upvoted 2 times
...
jcxxxxx2020
2 years, 3 months ago
Took the exam last Jan 28, 2023 and this question is not included
upvoted 2 times
...
Magis
2 years, 6 months ago
Correct. YYN
upvoted 1 times
...
Eltooth
3 years ago
Yes / Yes / No.
upvoted 2 times
Eltooth
3 years ago
I have a feeling MS may through in a MFA exclusion tab on new questions to check if we know if Boston office IP exclusion overrules CAP.
upvoted 1 times
sergioandreslq
1 month ago
that was funny, We should just accept this easy question happy, I hope they don't change it.
upvoted 1 times
...
...
...
Examtopicisawesome
3 years, 3 months ago
Yes / Yes / No
upvoted 2 times
...
Kctaz
3 years, 4 months ago
Yes / Yes / NO. I run this on my own AVD and ca confirm that the MFA is just deployed for AVD, not for any M365 services in AVD.
upvoted 4 times
...
Justin0020
3 years, 4 months ago
Got this question on exam today.
upvoted 4 times
...
Justin0020
3 years, 5 months ago
Yes, Yes, No is correct There are no named locations where MFA should not occur. In the CA policy in Cloud apps there is Azure Virtual Desktop configured. This policy only applies for making a connection to Azure Virtual Desktop. Not for Exchange Online or other M365 services, even within the virtual desktop itself.
upvoted 2 times
...
Flacky_Penguin32
3 years, 6 months ago
Yes, Yes, No - the conditional access is set to only Azure Virtual Desktop. Exchange online would need to be selected in order for the 3rd one to be Yes, but since its not selected and we don't know that it is, this is the reasoning for No.
upvoted 2 times
Domza
3 years, 5 months ago
Im going with YYN. I was just playing. Wanted to see ur explanation.
upvoted 1 times
...
...
Domza
3 years, 6 months ago
It says "Cloud app" or azure resources - Azure Virtual Desktop. To grant access, but require MFA. There is no "Allow" or "Blocked" location/IP address. So, why is last one NO?
upvoted 1 times
[Removed]
1 year, 8 months ago
"Cloud App or Action" is the category for configuration, "Azure Virtual Desktop" is the specific app being targeted. (The previous question had the graphic which makes it much more clear). Answer is YYN As explained by others the final no is because Azure Virtual Desktop is Targeted as the app to require MFA through the "Grant" access control. So when you sign into Exchange Online regardless of your originating IP you will not be prompted for MFA. The fact that they specify that you're signed into an AVD session is just to throw you off. #loveMicrosoft
upvoted 2 times
...
thiesuh
3 years, 6 months ago
Because it's connecting to Exchange online and the Conditional access policy is configured for Azure virtual desktop
upvoted 4 times
Domza
3 years, 5 months ago
Sunshine, read the question lol MFA is for Azure Virtual Desktop - grant access with MFA, NOT Exchange Online lol Step 1 - you connecting to Azure VD, then you log in to Exchange Online. Capish?
upvoted 1 times
CloudyTech
3 years, 5 months ago
are you sur its YYY ?
upvoted 1 times
...
LeGluten
2 years, 9 months ago
Domza, stop polluting ExamTopics, every answer you give are wrong. The question state: You connect to Exchange FROM a AVD, meaning it's already logged into the AVD...
upvoted 3 times
...
...
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago