Plan and implement identity and security — Microsoft Certified: Azure Virtual Desktop Specialty

The official AZURE documentation our Plan and implement identity and security practice questions are cited to. Review the primary sources, then practise.

practice 18 questions →

Official references for this objective

Microsoft — Azure Key Vault VM extension for Windows - Azure Virtual Machines | Microsoft Learn

A VM with an assigned managed identity .
Microsoft — Creating and configuring a key vault for Azure Disk Encryption - Azure Virtual Machine Scale Sets | Microsoft Learn

you must create and use a key vault that's in the same region and tenant as the VMs to be encrypted
Microsoft — Connect with Microsoft Entra Authentication - Azure SQL Database & SQL Managed Instance & Azure Synapse Analytics | Microsoft Learn

To connect using MFA, on the Connect to Server dialog box in SSMS select Microsoft Entra MFA . Fill the Server
Microsoft — Assign Azure RBAC roles or Microsoft Entra roles to the Azure Virtual Desktop service principals - Azure Virtual Desktop | Microsoft Learn

Azure Virtual Desktop Windows Virtual Desktop 9cdead84-a844-4324-93f2-b2e6bb768d07 Azure Virtual Desktop Client Windows Virtual Desktop Client a85cf173-4192-42f8-81fa-777a763e6e2c
Microsoft — Azure Key Vault virtual machine extension for Linux - Azure Virtual Machines | Microsoft Learn

The msiEndpoint property is also required for Azure Arc-enabled VMs . Set msiEndpoint to http://localhost:40342/metadata/identity .
Microsoft — Configure managed identity in Azure Virtual Desktop - Azure Virtual Desktop | Microsoft Learn

System-assigned : When you complete the removal, Azure automatically deletes the managed identity and all associated metadata. User-assigned : When you complete the removal, Azure
Microsoft — Grant access to Azure resources on a Service Fabric cluster - Azure Service Fabric | Microsoft Learn

Under Role , from the dropdown list, select Storage Blob Data Reader . In the next dropdown list, under Assign access to , choose User
Microsoft — Network Security Perimeter - Azure SQL Database | Microsoft Learn

By default, Network Security Perimeter uses Learning Mode , which can be used to log all traffic to and from SQL Database.
Microsoft — Network security group test - Azure Virtual Machines | Microsoft Learn

add to the network security group a security rule that allows RDP connections from the remote IP address. This security rule must have a higher
Microsoft — Require authentication using Microsoft Entra ID | Microsoft Learn

which should result in a connection error titled ENTRA_AUTH_REQUIRED_BY_SERVER