Two hundred seasonal contractors need a standard Windows desktop with the company's line-of-business applications, reached from their own unmanaged laptops, for four months. IT insists no company data ends up on those laptops. Which Azure service is built for this?

Microsoft Certified: Azure Fundamentals (AZ-900), objective architecture-and-services. Azure architecture and services medium

Machine-checked — no person has signed for it. This question was read against the source cited below by an automated pass, which found no contradiction. That is a weaker claim than it sounds: the same kind of process wrote the question, so it can confirm its own mistake.

Treat it as a good draft rather than as settled fact, and read the source below before you rely on it. It is not used in mock exams here — only questions a person has signed for are.

The options

Correct Azure Virtual Desktop

Correct. It delivers virtualised Windows desktops and applications from Azure, so the session and the data stay in Azure and the contractor's laptop is only a screen, a keyboard and a mouse.

Not correct One virtual machine each with a public IP and remote desktop open to the internet

Wrong on management and on security. That is two hundred machines to build and patch individually, each with a remote desktop port exposed to the internet — one of the most reliably attacked doors there is.

Not correct Azure App Service

Wrong. App Service hosts web applications. It cannot deliver a Windows desktop session or the installed line-of-business applications these people need.

Not correct Microsoft Entra ID licences with conditional access

Wrong on its own. Identity controls decide who may sign in and under what conditions; they do not provide a desktop to sign in to. This is a complement to the answer, not the answer.

Why

Azure Virtual Desktop centralises the desktop rather than the device: users connect to a session hosted in Azure, Windows multi-session lets several of them share a host, and data never has to land on the endpoint. When a requirement says the desktop itself, from any device, with nothing stored locally, that is Virtual Desktop — not a pile of individually managed virtual machines.

Where this comes from

Cited
Microsoft AZ-900 study guide skill area architecture-and-services.compute-and-networking

Practise this

Reading one question is not practice. The trainer will draw a set from objective architecture-and-services and space the ones you get wrong.

Practise Microsoft Certified: Azure Fundamentals (AZ-900)

More questions on this objective

All questions on Azure architecture and services