Question 690
In a controlled lab, the team applied Microsoft Entra group membership check so it could verify that a user has the security group used to entitle a RemoteApp application group. Which outcome verifies its behavior?
Explanation
Correct Answer
This is the direct functional outcome for Microsoft Entra group membership check: effective group membership includes the authorized app-group access group. Directory membership controls group-based entitlements. The observed behavior supports the specified acceptance requirement.
Incorrect Answers
That evidence concerns Azure Activity Log RBAC denial record, used to find a hostpool update rejected by Azure control-plane permissions rather than by the user's Windows logon rights. It does not establish whether Microsoft Entra group membership check satisfies the current requirement to verify that a user has the security group used to entitle a RemoteApp application group.
That evidence concerns Windows Cloud Login sign-in record, used to distinguish a second-stage Windows login failure from an earlier AVD feed sign-in success. It does not establish whether Microsoft Entra group membership check satisfies the current requirement to verify that a user has the security group used to entitle a RemoteApp application group.
That evidence concerns FSLogix profile access audit versus login denial, used to show that a user passed Windows sign-in but profile attachment subsequently failed due to SMB permissions. It does not establish whether Microsoft Entra group membership check satisfies the current requirement to verify that a user has the security group used to entitle a RemoteApp application group.






Configuring and Operating Microsoft Azure Virtual Desktop (AZ-140) Practice Tests