Microsoft Configuring and Operating Microsoft Azure Virtual Desktop (AZ-140)

You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains 10 session hosts that were deployed by using an Azure Resource Manager (ARM) template.

You discover that Windows licenses were NOT applied to the session hosts.

You need to use a PowerShell script to update the licenses.

Which cmdlet should you include in the solution?

You have an Azure Virtual Desktop deployment that contains two users named User1 and User2 and the storage accounts shown in the following table.

The File share settings for storage1 are configured as shown in the following exhibit.

The File share settings for storage2 are configured as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:

You have an Azure Virtual Desktop deployment and two Azure Active Directory groups named Group1 and Group2.

You create two Conditional Access policies named Policy1 and Policy2. Policy1 is assigned to Group1. Policy2 is assigned to Group2. Both policies include Azure Virtual Desktop as a cloud app.

You need to meet the following requirements:

• The users in Group1 must be prompted for multi-factor authentication (MFA) when they connect to Azure Virtual Desktop.

• The users in Group2 must reauthenticate every eight hours while they are connected to Azure Virtual Desktop.

Which settings should you configure in Policy1 and Policy2? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an Azure Virtual Desktop deployment that contains the session hosts shown in the following table

You have the users shows in the following table.

Users connect to Azure from the locations shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains two session hosts named Host1 and Host2.

You need to enable screen capture protection for the deployment.

What should you do?

You have an Azure Virtual Desktop deployment that contains a host pool. The host pool contains 10 session hosts. The session hosts are configured by using a custom image and ephemeral disks.

You need to deploy Microsoft OneDrive for Business.

Which two actions should you perform for each session host? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

You have an Azure Virtual Desktop deployment that contains the following:

• A host pool named Pool1

• Two session hosts named Host1 and Host2

• An application group named RemoteAppGroup1 that contains a RemoteApp named App1

You need to prevent users from copying and pasting between App1 and their local device.

What should you do?

You have an Azure Virtual Desktop deployment that contains a host pool named Pool1, Pooll contains two session hosts.

You build a custom virtual machine named Server2 that runs Windows Server.

You need to add Server2 to Pool 1.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

You have an Azure subscription that contains an Azure Virtual Desktop deployment and the storage accounts shown in the following table.

You plan to deploy a host pool named Pool1 to the East US Azure region. Pool1 will use FSLogix Profile Containers and Office Containers.

Which storage accounts can Pool1 use?

You have an Azure Virtual Desktop deployment that contains a host pool named Pool1, Pool1 contains two session hosts.

Pool1 is configured as shown in the following exhibit.

Both session hosts in Pool1 are currently running.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

NOTE: Each correct selection is worth one point.

Your network contains an on-premises Active Directory domain that syncs to an Azure Active Directory (Azure AD) tenant. The domain contains the domain controllers shown in the following table.

The DNS servers are configured to forward requests to an external DNS service.

You create a new virtual network named VNET2 that is peered to VNET1 and has gateway transit enabled.

You plan to implement an Azure Virtual Desktop host pool in VNET2. The session hosts will be joined to the Active Directory domain.

You need to configure DNS to meet the following requirements:

✑ Ensure that Azure Virtual Desktop users can resolve on-premises servers and Azure resources.

✑ Ensure that azure Virtual Desktop remains operational if a DNS server fails.

✑ Minimize administrative effort.

What should you configure?

You create the virtual machines shown in the following table.

You need a source virtual hard disk for new Azure Virtual Desktop session host deployments. The source operating system must have user-specific and machine- specific information removed.

Which virtual machines can you use as the source?

You have an Azure Virtual Desktop deployment.

You plan to implement FSLogix profiles for the deployment.

You need to configure NTFS permissions for the file share that will store the FSLogix profiles. The solution must follow the principle of least privilege.

At which level should you apply permissions for CREATOR OWNER?

This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure subscription that contains a virtual network named VNet1, a storage account named storage1, and five Azure Virtual Desktop session hosts. VNet1 and storage1 are in the East US Azure region. The session hosts are connected to VNet1.

In storage1, you create an Azure Files share named share1.

You need to ensure that the session hosts connect to share1 by using the Microsoft backbone network.

Solution: You create a routing table and assign the table to Vnet1.

Does this meet the goal?

What should you do to meet the user profile requirements?

What should you do to ensure that the session hosts meet the application requirements for App1?

What should you do to meet the application requirements? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

What should you configure to meet the networking requirements?

You need to prepare the disk on VM1 for use with the Azure Virtual Desktop deployment.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Which host pool design and which service should you configure to meet the disaster recovery requirements? To answer, drag the appropriate solution to the correct requirements. Each solution may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Which monitoring solution should you configure to meet the security requirements?

You have an Azure Virtual Desktop deployment that contains the resources shown in the following table.

You create the vaults shown in the following table. 

You need to back up the resources.
Which resources can you back up to each vault? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

You have an Azure subscription that contains an Azure Virtual Desktop host pool named Pool1.

You plan to deploy session hosts to Pool1 by using a custom image that will be hosted in Azure Compute Gallery.

You need to build the custom image for the session hosts. The session hosts must have time zone redirection enabled and Storage Sense disabled. The solution must minimize administrative effort.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

You have an Azure Virtual Desktop deployment that contains a host pool named Poo11.

You plan to use a custom image template to create session hosts for Pool1.

You need to create the custom image template.

What should you create first?

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure subscription that contains a virtual network named VNet1, a storage account named storage1, and five Azure Virtual Desktop session hosts. VNet1 and storage1 are in the East US Azure region. The session hosts are connected to VNet1.

In storage1, you create an Azure Files share named share1.

You need to ensure that the session hosts connect to share1 by using the Microsoft backbone network.

Solution: You configure network peering for Vnet1.

Does this meet the goal?

You have an Azure subscription.

You have a Microsoft 365 subscription that contains 1,000 users. Each user is assigned a Microsoft 365 E5 license.

You are deploying Azure Virtual Desktop to meet the following requirements:

• Ensure that user modifications are persistent between the session hosts in the deployment.
• Support simultaneous connections for 200 external users and 100 internal users.
• Support apps that require GPU resources.
• Minimize costs.

You perform the following tasks:

• Deploy three pooled host pools. Each host pool contains 15 session hosts that run Windows 11 Enterprise multi-session. Each session host is deployed to an NV-series virtual machine and supports eight user sessions.
• Enroll the Azure subscription in per-user access pricing for Azure Virtual Desktop.
• Implement FSLogix profile containers

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains a session host named Computer1 that runs Windows 11 Enterprise multi-session.

You plan to manage the user profiles of Computer1 by using FSLogix.

You need to use Local Group Policy Editor to configure FSLogix on Computer1 by using the English (United States) version of fslogix.admx and fslogix.adml Group Policy administrative template files.

To which folder on Computer1 should you copy the files? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an Azure Virtual Desktop deployment.

You need to ensure that when users connect to the deployment, they must authenticate by using passwordless authentication.

Which two features should you configure? To answer, select the appropriate settings in the answer area.

NOTE: Each correct selection is worth one point.

You have an Azure subscription and an Azure Virtual Desktop deployment. The subscription contains the storage locations shown in the following table.

You plan to use app attach to deploy an image named App1.vhdx.

You need to copy App1.vhdx to a storage location.

To which locations can you copy App1.vhdx?

Your network contains an Active Directory Domain Services (AD DS) domain named corp.contoso.com.

You have a Microsoft Entra tenant that syncs with corp.contoso.com.

You plan to deploy Azure Virtual Desktop.

You need to recommend a user profile management solution. The solution must meet the following requirements:

• Support server operating system SKUs.
• Enable the roaming of user settings and data.
• Support cloud-based storage for user profiles.
• Support Microsoft OneDrive for Business in pooled host pools.

What should you include in the recommendation?

Your on-premises network contains an Active Directory Domain Services (AD DS) domain named corp.contoso.com. The domain contains two users named User1 and User2.

You have a Microsoft Entra tenant named contoso.com that contains a user named User3 and syncs with corp.contoso.com.

The sync status of the users is shown in the following table.

You have 20 on-premises Windows 11 devices.
You have an Azure subscription that contains an Azure Virtual Desktop deployment. The deployment only uses private IP addresses.
You need to recommend what to use to connect to Azure Virtual Desktop session hosts. The solution must support the following features:
• Multiple monitors
• Camera redirection
What should you recommend for each feature? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

You have an Azure subscription.
You are planning an Azure Virtual Desktop deployment that will use custom Windows 11 images.
You need to configure the custom images to meet the following requirements:

• Support FSLogix application masking.
• Minimize the components installed in each image.

Which FSLogix components should you install in the administrative workstation image, and which FSLagix components should you install in the session host image? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an Azure subscription that contains an Azure Virtual Desktop deployment. The deployment contains 25 session hosts.

You create two storage accounts as shown in the following table.

 

The storage accounts store Azure Virtual Desktop user profile data.

You plan to deploy FSLogix user Profile Containers that will use Cloud Cache.

You need to configure the FSLogix registry settings for each session host.

How should you complete the registry settings? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an on-premises Windows device named Device1.

You have an Azure Virtual Desktop host pool named Pool1 that contains Windows 11 session hosts.

You create an application group named AppGrp1. You have an app named App1. App1 is added to AppGrp1 and published as a RemoteApp.

You need to ensure that when a user on Device1 connects to App1, Microsoft OneDrive launches.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

You have an Azure subscription that contains a user named User1 and an Azure Virtual Desktop host pool named Pool1. Pool1 contains the session hosts shown in the following table.

 

You have the devices shown in the following table.

 

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

You have an Azure subscription that contains a storage account named account1.

You plan to deploy an Azure Virtual Desktop host pool that will contain multiple session hosts and use FSLogix profile containers. The profile containers will be stored in account1.

You need to provide the session hosts with access to account1. The solution must minimize the number of permissions granted to each session host.

What should you use?

You have a Microsoft 365 E5 subscription that uses Microsoft Intune and Microsoft Defender for Endpoint.

You have an Azure Virtual Desktop deployment that contains a personal host pool named Pool1.

Pool1 contains session hosts that have the following configurations:

• Are onboarded to Defender for Endpoint
• Have Windows 11 Enterprise installed
• Are enrolled in Intune

You need to ensure that the user connections to Pool1 meet the following security requirements:

• Users must be prevented from using the clipboard to copy and paste from a session host to a local device.
• Users must be prevented from connecting to websites that are identified as security risks by the Microsoft Defender Threat Intelligence (Defender Tl) service.
• The solution must minimize administrative effort.

What should you configure to meet each requirement? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an Azure Virtual Desktop deployment.

You plan to use a Conditional Access policy to enforce users to use the Microsoft Authenticator app if they use a web browser to sign in to a session host.

How should you configure the policy? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have a new Azure subscription that uses Azure Virtual Desktop.

You need to ensure that users who connect to Azure Virtual Desktop sessions reauthenticate every six hours.

What should you do first?

You have an Azure subscription.

You deploy Azure Virtual Desktop.

Which two Azure Virtual Desktop features require you to assign Azure role-based access control (Azure RBAC) roles to the Azure Virtual Desktop service principal? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

You have an Azure Virtual Desktop deployment that contains the host pools shown in the following table.

You have a Microsoft 365 subscription that contains 200 users. Each user is assigned a Microsoft 365 Apps for business license.

You plan to deploy an Azure Virtual Desktop personal host pool to support 50 users. The planned deployment will have the following configurations:

• A dedicated virtual machine will be assigned to each user.

• Each virtual machine will run Windows 11 and have Microsoft 365 apps installed.

You need to recommend a licensing solution for the deployment. The solution must minimize costs.

Which type of license should you include in the recommendation?

You have a Microsoft 365 E5 subscription.

You have an Azure subscription.

You plan to deploy the Azure Virtual Desktop host pools shown in the following table.

You have an Azure subscription that contains an Azure Virtual Desktop session host named Host1 and a user named User1.

You need to assign Host1 as a personal desktop to User1.

Which cmdlet should you run?

You have an Azure subscription that contains an Azure Virtual Desktop deployment, a standard Azure Firewall instance named FW1, and the virtual networks shown in the following table.

You have a hybrid Active Directory Domain Services (AD DS) and Microsoft Entra ID environment that contains 1,000 users.

You plan to deploy Azure Virtual Desktop. The session host virtual machines will be joined to the AD DS domain. Each session host will host five concurrent user sessions that run Microsoft 365 apps.

You need to select the image for the planned Azure Virtual Desktop deployment. The solution must minimize licensing costs.

Which image should you use for the deployment?

You have a Microsoft 365 E5 subscription.
You have an Azure subscription named Sub1. Sub1 contains an Azure Virtual Desktop deployment. The deployment contains the session hosts shown in the following table.

You have an Azure subscription that contains two users named User1 and User2 and an Azure Virtual Desktop host pool named Pool1. Pool1 has a RemoteApp application group named AG1. User1 is assigned the Desktop Virtualization Application Group Contributor role.

You need to ensure that User1 can assign users to AG1, and User2 can sign out disconnected users from Pool1. The solution must follow the principle of least privilege.

Which role should you assign to each user? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure subscription that contains a virtual network named VNet1, a storage account named storage1, and five Azure Virtual Desktop session hosts. VNet1 and storage1 are in the East US Azure region. The session hosts are connected to VNet1.

In storage1, you create an Azure Files share named share1.

You need to ensure that the session hosts connect to share1 by using the Microsoft backbone network.

Solution: You add a private endpoint to storage1.

Does this meet the goal?

You have an Azure subscription named Sub1.

Sub1 has an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains five session hosts in the West Europe Azure region.

You plan to implement an active-active disaster recovery solution that meets the following requirements:

• Users must only be able to connect to the session hosts in either the West Europe or the North Europe Azure region.

• Users must have only a single workspace in the Remote Desktop client.

Which two actions should you perform to deploy the session hosts to the North Europe region? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

You have a Microsoft 365 E5 subscription.
You receive the data loss prevention (DLP) alert shown in the following exhibit.
 

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

You have an Azure subscription that contains an Azure Virtual Desktop host pool named Pool1. Pool1 contains a single session host named Host1.

You need to ensure that when an Azure Virtual Desktop session has been inactive for 30 minutes, the user is signed out of the session automatically. The solution must NOT affect other session timeout settings.

What should you do?

You have an Azure subscription that contains an Azure Virtual Desktop host pool named Pool1. All the session hosts in Pool1 are Microsoft Entra joined.

Users connect to Pool1 by using macOS devices.

You need to ensure that remote users can authenticate to RemoteApp sessions by using their Microsoft Entra credentials.

Which RDP property should you configure?

You have an on-premises Hyper-V host named Server1 and an Azure subscription.

On Server1, you create a virtual machine named VM1 that has the following configurations:

• Generation: 2

• Virtual disk name: ImageC.vhdx

• Virtual disk type: Dynamically expanding

You generalize VM1.

You plan to deploy Azure Virtual Desktop by using a custom VM1 image.

You need to prepare ImageC.vhdx to ensure that can it be used as a source for the deployment.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an Azure Virtual Desktop deployment that contains the resources shown in the following table.

You have an Azure Virtual Desktop deployment.

You need to enable the redirection of USB drives to the virtual machines. The solution must ensure that all the USB drives are accessible.

What should you do?

You have an Azure subscription that contains an Azure Virtual Desktop deployment. All the session hosts in the deployment are joined to Active Directory.

You plan to implement Quality of Service (QoS) for the deployment by using Group Policy

You need to configure a QoS policy that will tag Remote Desktop Services (RDS) traffic for Expedited Forwarding (EF).

Which DSCP value should you specify, and which executable should you tag? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an Azure Virtual Desktop deployment that contains a host pool named Pool1.

Pool1 contains session hosts that run Windows 11 Enterprise and have Microsoft Teams installed.

Users connect to the session hosts by using client devices that run Windows 10 Enterprise.

You need to configure the session hosts and the client devices to meet the following requirements:

• Teams audio and video must be processed on the client devices.
• Hardware encoding must be enabled.

What should you do? To answer, drag the appropriate actions to the correct devices. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

DRSG DROP

You have an Azure Virtual Desktop deployment that contains the resources shown in the following table.

Correct Answer:

`

You have a Microsoft Entra tenant named contoso.com that contains cloud-only user accounts.
You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains session hosts that are joined to contoso.com.
You plan to use FSLogix profile containers to manage user profiles.
You need to configure storage for the FSLogix solution.
Which type of storage should you use for the profile containers, and which FSLogix registry key should you configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

You have an Azure subscription that contains an Azure Virtual Desktop deployment and a Microsoft Entra Domain Services domain. The deployment contains 10 session hosts that are joined to the domain.

You plan to deploy FSLogix profile containers and store the containers in Azure.

You need to configure storage for the containers. The solution must ensure that you can assign share permissions to Microsoft Entra accounts.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Which type of host pool and load balancing algorithm should you configure to meet the performance requirements? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an Azure subscription that contains two users named User1 and User2 and the Microsoft Entra groups shown in the following table.

Your on-premises network contains an Active Directory Domain Services (AD DS) domain named corp.contoso.com.

You have an Azure subscription named Sub1.

You have a Microsoft Entra tenant that syncs with corp.contoso.com.

You plan to deploy Azure Virtual Desktop to Sub1 and configure FSLogix user profiles.

You need to provision an Azure Storage account for the user profiles. The solution must maximize resiliency

To what should you set Redundancy and Premium account type? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an Azure subscription that contains an Azure Virtual Desktop deployment. All the session hosts in the deployment are joined to Active Directory.

You plan to implement Quality of Service (QoS) for the deployment by using Group Policy

You need to configure a QoS policy that will tag Remote Desktop Services (RDS) traffic for Expedited Forwarding (EF).

Which DSCP value should you specify, and which executable should you tag? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You are planning an Azure Virtual Desktop deployment that must support both internal and external users.

You need to recommend how many Azure subscriptions to add to the deployment, and what to assign to each type of user. The solution must minimize costs.

What should you recommend? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Which monitoring solution should you configure to meet the security requirements?

You have an Azure subscription that contains a Bicep file named AVD.bicep.

You plan to use AVD.bicep to deploy Azure Virtual Desktop.

Which commands should you run in sequence? To answer, drag the appropriate commands to the correct order. Each command may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

You have an Azure subscription.

You plan to deploy Azure Virtual Desktop.

You need to maximize network throughput for the session hosts in the deployment.

What will have the largest impact on the network throughput of each session host?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure subscription that contains a virtual network named VNet1, a storage account named storage1, and five Azure Virtual Desktop session hosts. VNet1 and storage1 are in the East US Azure region. The session hosts are connected to VNet1.

In storage1, you create an Azure Files share named share1.

You need to ensure that the session hosts connect to share1 by using the Microsoft backbone network.

Solution: You add a private endpoint to storage1.

Does this meet the goal?

You have an Azure subscription that contains an Azure Virtual Desktop pooled host pool named Pool1 in the Azure East US region.

You create the scaling plans shown in the following table.

Which host pool design and which service should you configure to meet the disaster recovery requirements? To answer, drag the appropriate solution to the correct requirements. Each solution may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.