You have a Microsoft Entra hybrid tenant that contains the users shown in the following table. You deploy Microsoft Entra joined Azure Virtual Desktop session hosts. Which users support the use of…

The correct answer is B. User2 only. FSLogix application rule sets (App Masking) on Microsoft Entra joined AVD session hosts require users to be hybrid-synchronized accounts - that is, accounts originating in on-premises AD DS and synchronized to Microsoft Entra ID via Microsoft Entra Connect. Based on the…

Submitted by manish99· Apr 18, 2026Plan and implement identity and security

Question

You have a Microsoft Entra hybrid tenant that contains the users shown in the following table. You deploy Microsoft Entra joined Azure Virtual Desktop session hosts. Which users support the use of FSLogix application rule sets?

Options

AUser1 only
BUser2 only
CUser1 and User2 only.
DUser1 and User3 only
EUser1, User2, and User3

How the community answered

(24 responses)

B
75% (18)
C
8% (2)
D
4% (1)
E
13% (3)

Explanation

FSLogix application rule sets (App Masking) on Microsoft Entra joined AVD session hosts require users to be hybrid-synchronized accounts - that is, accounts originating in on-premises AD DS and synchronized to Microsoft Entra ID via Microsoft Entra Connect. Based on the referenced user table, User2 is the only hybrid-synced user. User1 is likely a cloud-only Microsoft Entra account (not eligible because FSLogix rule sets on Entra-joined hosts require on-premises identity backing), and User3 is likely an on-premises-only AD DS account that cannot authenticate to Microsoft Entra joined hosts at all.

Topics

#FSLogix#Hybrid Identity#Azure AD Joined#Azure Files Authentication

Community Discussion

No community discussion yet for this question.

Full AZ-140 Practice