AZ-140 · Question #171
You have an Azure subscription named Subscription that contains an Azure Virtual Desktop host pool named HostPool1. HostPool1 is managed by using Microsoft Intune. Subscription1 contains 50 users that
The correct answer is A. Modify the RDP properties of HostPool1.. To prevent users from copying files between an Azure Virtual Desktop session and their local computers, you should modify the RDP properties of the host pool.
Question
You have an Azure subscription named Subscription that contains an Azure Virtual Desktop host pool named HostPool1. HostPool1 is managed by using Microsoft Intune. Subscription1 contains 50 users that connect to HostPool1 by using computers that run Windows 10. You need to prevent the users from copying files between an Azure Virtual Desktop session and the computers. The solution must minimize administrative effort. What should you do?
Options
- AModify the RDP properties of HostPool1.
- BCreate a Conditional Access policy in Azure Active Directory (Azure AD).
- CCreate a compliance policy in Intune.
- DCreate a configuration profile in Intune.
How the community answered
(19 responses)- A79% (15)
- B5% (1)
- C5% (1)
- D11% (2)
Why each option
To prevent users from copying files between an Azure Virtual Desktop session and their local computers, you should modify the RDP properties of the host pool.
RDP properties on an Azure Virtual Desktop host pool allow administrators to control client device and resource redirection settings, including clipboard redirection. Disabling clipboard redirection directly in the host pool's RDP properties prevents users from copying files between the AVD session and their local computers, fulfilling the requirement with minimal administrative effort. This setting applies to all sessions connecting to that host pool.
Conditional Access policies in Azure AD control *access* to applications and resources based on conditions, not specific in-session RDP client redirection settings like clipboard functionality.
An Intune compliance policy defines security baselines and reports on device compliance, it does not directly configure RDP redirection settings for Azure Virtual Desktop sessions.
While Intune configuration profiles can deploy settings to managed devices, controlling RDP clipboard redirection for Azure Virtual Desktop sessions is more directly and efficiently managed through the host pool's RDP properties.
Concept tested: Azure Virtual Desktop RDP redirection control
Source: https://learn.microsoft.com/en-us/azure/virtual-desktop/customize-rdp-properties
Topics
Community Discussion
No community discussion yet for this question.