Exam AZ-140 All Questions

View all questions & answers for the AZ-140 exam

Exam AZ-140 topic 3 question 4 discussion

Actual exam question from Microsoft's AZ-140

Question #: 4
Topic #: 3

HOTSPOT -
Your company has the offices shown in the following table.

The company has an Azure Active Directory (Azure AD) tenant named contoso.com that contains a user named User1.
Users connect to a Azure Virtual Desktop deployment named WVD1. WVD1 contains session hosts that have public IP addresses from the 52.166.253.0/24 subnet.
Contoso.com has a conditional access policy that has the following settings:
✑ Name: Policy1
✑ Assignments:
- Users and groups: User1
- Cloud apps or actions: Azure Virtual Desktop
✑ Access controls:
- Grant: Grant access, Require multi-factor authentication
✑ Enable policy: On
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-azure-mfa

by SCT at Oct. 25, 2021, 10:10 a.m.

Comments

Submit Cancel

SCT

Highly Voted 3 years, 8 months ago

Yes, Yes, No

upvoted 27 times

...

Karl_Anthony_Towns

Most Recent 8 months, 2 weeks ago

Yes Yes No

upvoted 1 times

...

ESAJRR

1 year, 5 months ago

Yes Yes No

upvoted 2 times

...

jcxxxxx2020

2 years, 4 months ago

Took the exam last Jan 28, 2023 and this question is not included

upvoted 2 times

...

Magis

2 years, 7 months ago

Correct. YYN

upvoted 1 times

...

Eltooth

3 years, 2 months ago

Yes / Yes / No.

upvoted 2 times

Eltooth

3 years, 2 months ago

I have a feeling MS may through in a MFA exclusion tab on new questions to check if we know if Boston office IP exclusion overrules CAP.

upvoted 1 times

sergioandreslq

2 months, 3 weeks ago

that was funny, We should just accept this easy question happy, I hope they don't change it.

upvoted 1 times

...

Examtopicisawesome

3 years, 5 months ago

Yes / Yes / No

upvoted 2 times

...

Kctaz

3 years, 6 months ago

Yes / Yes / NO. I run this on my own AVD and ca confirm that the MFA is just deployed for AVD, not for any M365 services in AVD.

upvoted 4 times

...

Justin0020

3 years, 6 months ago

Got this question on exam today.

upvoted 4 times

...

Justin0020

3 years, 6 months ago

Yes, Yes, No is correct There are no named locations where MFA should not occur. In the CA policy in Cloud apps there is Azure Virtual Desktop configured. This policy only applies for making a connection to Azure Virtual Desktop. Not for Exchange Online or other M365 services, even within the virtual desktop itself.

upvoted 2 times

...

Flacky_Penguin32

3 years, 7 months ago

Yes, Yes, No - the conditional access is set to only Azure Virtual Desktop. Exchange online would need to be selected in order for the 3rd one to be Yes, but since its not selected and we don't know that it is, this is the reasoning for No.

upvoted 2 times

Domza

3 years, 7 months ago

Im going with YYN. I was just playing. Wanted to see ur explanation.

upvoted 1 times

...

Domza

3 years, 7 months ago

It says "Cloud app" or azure resources - Azure Virtual Desktop. To grant access, but require MFA. There is no "Allow" or "Blocked" location/IP address. So, why is last one NO?

upvoted 1 times

[Removed]

1 year, 10 months ago

"Cloud App or Action" is the category for configuration, "Azure Virtual Desktop" is the specific app being targeted. (The previous question had the graphic which makes it much more clear). Answer is YYN As explained by others the final no is because Azure Virtual Desktop is Targeted as the app to require MFA through the "Grant" access control. So when you sign into Exchange Online regardless of your originating IP you will not be prompted for MFA. The fact that they specify that you're signed into an AVD session is just to throw you off. #loveMicrosoft

upvoted 2 times

...

thiesuh

3 years, 7 months ago

Because it's connecting to Exchange online and the Conditional access policy is configured for Azure virtual desktop

upvoted 4 times

Domza

3 years, 7 months ago

Sunshine, read the question lol MFA is for Azure Virtual Desktop - grant access with MFA, NOT Exchange Online lol Step 1 - you connecting to Azure VD, then you log in to Exchange Online. Capish?

upvoted 1 times

CloudyTech

3 years, 7 months ago

are you sur its YYY ?

upvoted 1 times

...

LeGluten

2 years, 11 months ago

Domza, stop polluting ExamTopics, every answer you give are wrong. The question state: You connect to Exchange FROM a AVD, meaning it's already logged into the AVD...

upvoted 3 times

...