nerdexam
Microsoft

AZ-140 · Question #187

You have an Azure Virtual Desktop personal host pool named Pool1 that contains 20 Azure AD- joined session hosts. You need to ensure that only approved virtual machine extensions are installed on the

The correct answer is B. Azure Policy. Azure Policy is Built-in policy: "Only approved VM extensions should be installed" (find in: Azure portal > Policy > Definitions).

Submitted by fatema_kw· Apr 18, 2026Plan and implement identity and security

Question

You have an Azure Virtual Desktop personal host pool named Pool1 that contains 20 Azure AD- joined session hosts. You need to ensure that only approved virtual machine extensions are installed on the Pool 1 session hosts. The solution must minimize administrative effort. What should you use?

Options

  • AAzure Resource Manager (ARM) templates
  • BAzure Policy
  • CWindows Admin Center
  • DGroup Policy

How the community answered

(30 responses)
  • A
    3% (1)
  • B
    80% (24)
  • C
    10% (3)
  • D
    7% (2)

Explanation

Azure Policy is Built-in policy: "Only approved VM extensions should be installed" (find in: Azure portal > Policy > Definitions).

Topics

#Azure Policy#Virtual Machine Extensions#Azure Virtual Desktop#Security Compliance

Community Discussion

No community discussion yet for this question.

Full AZ-140 Practice