az-140 Practice Question 2032
Exam: az-140
Domain: Manage access and security
Topic: Manage RBAC and Conditional Access for AVD
Difficulty: medium
You have configured Conditional Access policies for your Azure Virtual Desktop (AVD) environment to require Multi-Factor Authentication (MFA) for all clients connecting from outside the corporate network. However, you want to ensure that users who connect from specific trusted IP ranges do not have to use MFA. How should you configure the Conditional Access policy?
**Note:** You can only choose one option.
Answer Options
A
Create a new Conditional Access policy and set the MFA requirement to 'Never'
B
Create a new Conditional Access policy and add an exception for the trusted IP ranges
C
Modify the existing Conditional Access policy to include an exception for the trusted IP ranges
D
Use Azure Firewall to block MFA for connections from trusted IP ranges
Correct Answer
B: Create a new Conditional Access policy and add an exception for the trusted IP ranges
Explanation
The correct answer is B because you can define exceptions within the Conditional Access policy to exclude certain IP ranges from requiring MFA. Option A is incorrect because it does not provide a way to exclude specific IP ranges. Option C is incorrect because it does not address the requirement to exclude specific IP ranges. Option D is incorrect because it does not provide a way to define exceptions within the policy.