exam questions

Exam AZ-140 All Questions

View all questions & answers for the AZ-140 exam

Exam AZ-140 topic 3 question 39 discussion

Actual exam question from Microsoft's AZ-140
Question #: 39
Topic #: 3
[All AZ-140 Questions]

HOTSPOT
-

You have a Microsoft 365 E5 subscription that uses Microsoft Intune and Microsoft Defender for Endpoint.

You have an Azure Virtual Desktop deployment that contains a personal host pool named Pool1.

Pool1 contains session hosts that have the following configurations:

• Are onboarded to Defender for Endpoint
• Have Windows 11 Enterprise installed
• Are enrolled in Intune

You need to ensure that the user connections to Pool1 meet the following security requirements:

• Users must be prevented from using the clipboard to copy and paste from a session host to a local device.
• Users must be prevented from connecting to websites that are identified as security risks by the Microsoft Defender Threat Intelligence (Defender Tl) service.
• The solution must minimize administrative effort.

What should you configure to meet each requirement? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer Hide Answer
Suggested Answer:

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
AITANA_MANAGEMENT
2 weeks ago
1º RDP properties and Intunes configuration both are correct, but the point here is *** The solution must minimize administrative effort.*** so, i think the correct is RDP properties, effortless 2º Defender Endpoint Policy
upvoted 2 times
zuzmo483
1 week ago
I think you are correct with RDP Properties. It's literally a single attribute on the existing pool setting, while to setup a config profile, you need to spend few minute to find the settings, allocate it to a hosts etc.
upvoted 1 times
...
...
lusis987
4 weeks ago
RDP Properties Endpoint Policy
upvoted 1 times
...
belyo
1 month ago
Users must be prevented from using the clipboard to copy and paste from a session host to a local device -> RDP Properties -> Clipboard redirection effortless MDE web content filtering for websites
upvoted 1 times
...
hwoccurrence
1 month ago
Correct. Configure clipboard redirection settings through an Intune configuration profile. In a Windows 11 or Windows 10 configuration profile, you can disable or limit clipboard redirection (the “Do not allow clipboard redirection” setting) so that users cannot copy and paste from the session host to their local device. Use Microsoft Defender for Endpoint web content filtering. You can create a Defender for Endpoint policy that blocks or warns on sites classified as high risk by Microsoft Defender Threat Intelligence. This lets you centrally enforce web filtering for any host onboarded to Defender for Endpoint, including your personal AVD session hosts.
upvoted 1 times
...
maniac2022
3 months, 1 week ago
A configuration profile in Intune: "Do not allow Clipboard redirection". => https://learn.microsoft.com/en-us/azure/virtual-desktop/redirection-configure-clipboard?tabs=intune&pivots=azure-virtual-desktop Prevent access to websites - A Defender for Endpoint policy: Settings > Endpoints > Web content filtering (under Rules). => https://learn.microsoft.com/en-us/defender-endpoint/web-content-filtering
upvoted 2 times
maniac2022
3 months, 1 week ago
Probably its even less effort to use RDP Properties -> Clipboard redirection
upvoted 3 times
...
maniac2022
3 months, 1 week ago
Configure clipboard transfer direction using Intune / Group Policy / Registry: https://learn.microsoft.com/en-us/azure/virtual-desktop/clipboard-transfer-direction-data-types?tabs=intune
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago