You have an Azure Virtual Desktop deployment.
You have a RemoteApp named App1.
You discover that from the Save As dialog box of App1, users can run executable applications other than App1 on the session hosts.
You need to ensure that the users can run only published applications on the session hosts.
What should you do?
Suggested Answer: A
Get Premium AZ-140 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
37 comments · newest first
SH
Shawnta
11 months ago
A conditional access policy won't help with app restrictions, just saying.
QU
Quentin
11 months ago
I disagree, modifying RDP properties won't solve this issue.
DE
Denny
11 months ago
Wait, can users really run other executables from the Save As dialog? That's surprising!
FR
Francis
11 months ago
I think B could work too, but not as effective as AppLocker.
TR
Truman
12 months ago
You should definitely go with D, AppLocker is the way to restrict apps.
DE
Delsie
12 months ago
Conditional access policies sound important, but I don’t think they would directly control application execution like we need here. I’m leaning towards AppLocker.
DU
Dustin
1 year ago
I practiced a similar question where we had to restrict application access, and I think AppLocker was the answer there too. It makes sense for this scenario.
AR
Armanda
1 year ago
I'm not entirely sure, but I feel like modifying RDP properties could help limit what users can do in their sessions. It seems relevant.
TR
Trina
1 year ago
I remember studying about AppLocker policies, and I think they can restrict which applications users can run. That might be the right choice here.
SA
Samira
1 year ago
The key here is to identify the component that would be used to scale out the virtual next-generation firewalls in the public cloud. I think the answer is D, internal load balancer.
JE
Jesusita
1 year ago
I'm a bit confused by the question - it seems to be asking about scenarios that don't apply to Aestivation, but I'm not entirely sure what Aestivation is. I'll need to review my notes to refresh my memory on that concept.
WA
Wade
1 year ago
Hmm, I'm a bit unsure about this one. I know it has something to do with Real-Time Transport Protocol, but I can't remember the specific protocol used to communicate codec capabilities.
TH
Thurman
1 year ago
I heard the Azure team is working on a new feature called 'Azure Remote Straightjacket' to solve this problem. Keeps those users in line, ya know?
JE
Jesus
1 year ago
D is the way to go. I mean, come on, who needs to run executable apps on a remote session anyway? That's like trying to play Doom on a calculator.
CH
Christa
1 year ago
D is definitely the best option to restrict unauthorized executable apps.
NA
Nakita
1 year ago
A) Configure a conditional access policy in Azure Active Directory (Azure AD).
RE
Reuben
1 year ago
D) Configure an AppLocker policy on the session hosts.
JO
Jordan
1 year ago
B might work, but I'm not sure if that's the most efficient way to handle this. Shouldn't we just lock down the session hosts directly?
JA
Jaclyn
1 year ago
Shouldn't we just lock down the session hosts directly?
AV
Avery
1 year ago
B) might work, but I'm not sure if that's the most efficient way to handle this.
JE
Jestine
1 year ago
D) Configure an AppLocker policy on the session hosts.
RO
Rosio
1 year ago
B) Modify the Access control (IAM) settings of the host pool.
RU
Ruby
1 year ago
Yeah, I agree. Configuring an AppLocker policy directly on the session hosts seems like the most secure solution.
CA
Carin
1 year ago
I think D is the best option to restrict users from running unauthorized applications.
ER
Eric
1 year ago
D) Configure an AppLocker policy on the session hosts.
VE
Verda
1 year ago
B) Modify the Access control (IAM) settings of the host pool.
JI
Jillian
2 years ago
I'm not sure about AppLocker. Maybe we should also consider modifying the Access control (IAM) settings of the host pool.
MA
Marnie
2 years ago
I agree with Lili. AppLocker can help restrict which applications can be run on the session hosts.
LI
Lili
2 years ago
I think we should configure an AppLocker policy on the session hosts.
OD
Odette
2 years ago
I'm not sure about AppLocker. Maybe we should also consider modifying the Access control (IAM) settings of the host pool.
KE
Kerry
2 years ago
D seems like the best option to restrict the users to only published applications. AppLocker should do the trick!
BE
Bernardo
1 year ago
Definitely, AppLocker will help ensure that only approved applications are allowed on the session hosts.
UL
Ula
1 year ago
I agree, AppLocker is a great way to control which applications users can run.
CH
Chau
1 year ago
That sounds like a good idea. AppLocker should restrict the users to only published applications.
LY
Lynette
1 year ago
D) Configure an AppLocker policy on the session hosts.
MA
Malissa
2 years ago
I agree with Jolanda. AppLocker can help restrict which applications can be run on the session hosts.
JO
Jolanda
2 years ago
I think we should configure an AppLocker policy on the session hosts.