AZ-900 Describe Azure architecture and services Practice Question
Which Azure service provides a managed virtual desktop infrastructure (VDI) solution for deploying Windows desktops and apps from Azure?
⚠ Common exam trap
A common mix-up: candidates confuse Azure Virtual Machines (IaaS) with Azure Virtual Desktop (managed VDI), mistakenly thinking that simply deploying VMs with RDP access constitutes a full VDI solution, when in fact AVD provides the necessary brokering, scaling, and multi-session capabilities that VMs alone lack.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Azure Virtual Desktop
Azure Virtual Desktop (AVD) is the correct answer because it is a managed desktop and app virtualization service that runs on Azure, providing a full multi-session Windows 10/11 experience and remote app streaming. Unlike IaaS-based VMs, AVD abstracts the underlying infrastructure, handles brokering, load balancing, and session management, and supports FSLogix profile containers for persistent user data. It uses the Remote Desktop Protocol (RDP) over HTTPS to deliver a secure, scalable VDI solution without needing to manage RDS roles or gateways.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Azure Virtual Machines
Why it's wrong here
Azure Virtual Machines are general-purpose IaaS compute instances that give tenants full control over the OS, but they do not provide a managed virtual desktop experience. To deliver VDI with VMs, you would have to manually deploy Remote Desktop Services, build and patch custom images, and manage load balancing and user access. That operational burden is exactly what Azure Virtual Desktop automates, so a standalone VM is not the correct service for hosted Windows desktops and apps.
- ✓
Azure Virtual Desktop
Why this is correct
Azure Virtual Desktop is the correct answer because it is Microsoft's managed VDI service that delivers virtualized Windows desktops, including the unique Windows 10/11 Enterprise multi-session OS, and RemoteApp applications from Azure. It provides the control plane, broker, gateway, scaling, and user assignments as a PaaS-style offering, with FSLogix for persistent user profiles. This directly matches the scenario of giving end users access to Windows desktops and apps without managing the underlying RDS infrastructure.
- ✗
Azure App Service
Why it's wrong here
Azure App Service is a PaaS offering designed specifically for hosting web applications, REST APIs, and mobile back ends on a managed IIS-compatible platform. It has no remote desktop protocol support, no Windows user desktop session concept, and no capability to publish individual Windows applications to end users' devices. While both services run applications, App Service serves HTTP/S web traffic, whereas Azure Virtual Desktop serves interactive desktop experiences, so it does not meet the VDI requirement.
- ✗
Azure Remote Desktop Gateway
Why it's wrong here
Azure Remote Desktop Gateway is not a standalone Azure service; it is a Windows Server RD Gateway role that organizations historically installed on-premises to proxy RDP traffic through a corporate firewall. It only handles secure remote connectivity to a separate infrastructure and offers no built-in desktop virtualization orchestration, multi-session Windows client hosting, or cloud application delivery. A fully managed cloud VDI solution like Azure Virtual Desktop supersedes this role by including gateways as part of its managed service.
Go deeper
Related to this question
Learn chapter
Azure Regions and Geographies
Key term
IaaS
IaaS stands for Infrastructure as a Service, which means renting virtual computing resources like servers, storage, and networking from a cloud provider instead of buying and managing physical hardware yourself.
Key term
User
A user is any person, system, or device that interacts with an IT service, resource, or identity system, typically authenticated through credentials and authorized to perform specific actions.
About these practice questions
This AZ-900 question is part of Courseiva's 981-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.