nerdexam
Microsoft

AZ-140 · Question #171

You have an Azure subscription named Subscription that contains an Azure Virtual Desktop host pool named HostPool1. HostPool1 is managed by using Microsoft Intune. Subscription1 contains 50 users that

The correct answer is A. Modify the RDP properties of HostPool1.. To prevent users from copying files between an Azure Virtual Desktop session and their local computers, you should modify the RDP properties of the host pool.

Submitted by minji_kr· Apr 18, 2026Plan and implement user environments and apps

Question

You have an Azure subscription named Subscription that contains an Azure Virtual Desktop host pool named HostPool1. HostPool1 is managed by using Microsoft Intune. Subscription1 contains 50 users that connect to HostPool1 by using computers that run Windows 10. You need to prevent the users from copying files between an Azure Virtual Desktop session and the computers. The solution must minimize administrative effort. What should you do?

Options

  • AModify the RDP properties of HostPool1.
  • BCreate a Conditional Access policy in Azure Active Directory (Azure AD).
  • CCreate a compliance policy in Intune.
  • DCreate a configuration profile in Intune.

How the community answered

(19 responses)
  • A
    79% (15)
  • B
    5% (1)
  • C
    5% (1)
  • D
    11% (2)

Why each option

To prevent users from copying files between an Azure Virtual Desktop session and their local computers, you should modify the RDP properties of the host pool.

AModify the RDP properties of HostPool1.Correct

RDP properties on an Azure Virtual Desktop host pool allow administrators to control client device and resource redirection settings, including clipboard redirection. Disabling clipboard redirection directly in the host pool's RDP properties prevents users from copying files between the AVD session and their local computers, fulfilling the requirement with minimal administrative effort. This setting applies to all sessions connecting to that host pool.

BCreate a Conditional Access policy in Azure Active Directory (Azure AD).

Conditional Access policies in Azure AD control *access* to applications and resources based on conditions, not specific in-session RDP client redirection settings like clipboard functionality.

CCreate a compliance policy in Intune.

An Intune compliance policy defines security baselines and reports on device compliance, it does not directly configure RDP redirection settings for Azure Virtual Desktop sessions.

DCreate a configuration profile in Intune.

While Intune configuration profiles can deploy settings to managed devices, controlling RDP clipboard redirection for Azure Virtual Desktop sessions is more directly and efficiently managed through the host pool's RDP properties.

Concept tested: Azure Virtual Desktop RDP redirection control

Source: https://learn.microsoft.com/en-us/azure/virtual-desktop/customize-rdp-properties

Topics

#Azure Virtual Desktop#RDP properties#Session security#User environment configuration

Community Discussion

No community discussion yet for this question.

Full AZ-140 Practice