3Identity and security

• 3.1Identity integration and access control

  Understand AVD identity scenarios (AD DS / Microsoft Entra ID / Microsoft Entra Domain Services), session-host identity configuration, Azure RBAC, Conditional Access, authentication options, and Microsoft Entra single sign-on.

• 3.2Securing session hosts

  Understand securing session hosts with Microsoft Defender for Cloud / Defender Antivirus / Defender for Endpoint, network security with UDR/NSG/Azure Firewall, Azure Bastion / JIT VM access, Windows threat protection, and confidential VM / Trusted Launch.