Summer Special Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: myex65

Home > Microsoft > Microsoft Certified: Windows Virtual Desktop Specialty > AZ-140

AZ-140 Configuring and Operating Microsoft Azure Virtual Desktop Question and Answers

Question # 4

You have a Windows Virtual Desktop deployment.

You need to provide external users with access to the deployment. The external users have computers that run Windows 10 Pro and Windows 10 Enterprise. The users do not have the ability to install applications.

What should you recommend that the users use to connect to the deployment?

A.

Microsoft Edge

B.

RemoteApp and Desktop Connection

C.

Remote Desktop Manager

D.

Remote Desktop Connection

Full Access
Question # 5

You need to ensure that you can implement user profile shares for the Boston office users. The solution must meet the user profile requirements.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Full Access
Question # 6

You need to configure the user settings of Admin1 to meet the user profile requirements.

What should you do?

A.

Modify the membership of the FSLogix ODFC Exclude List group.

B.

Modify the membership of the FSLogix Profile Exclude List group.

C.

Modify the HKLM\SOFTWARE\FSLogix\Profiles registry settings.

D.

Modify the HKLM\SOFTWARE\FSLogix\ODFC registry settings.

Full Access
Question # 7

You need to configure a conditional access policy to meet the authentication requirements.

What should you include in the policy configuration? To answer, select the appropriate options in the answer area.

NOTE Each correct selection is worth one point.

Full Access
Question # 8

You need to recommend a DNS infrastructure that meet the performance requirements. What should you recommend? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Full Access
Question # 9

You need to deploy the session hosts to meet the deployment requirements Which PowerShell cmdlel should you run first?

A.

New-AzwvdRegistratrationinfo

B.

Get-AzApiManagementSsoToken

C.

Set-AzWMADDomainExtension

D.

Update-AZwvdSessionHost

Full Access
Question # 10

You need to implement network security to meet the security requirements and the performance requirements.

Which two actions should you perform? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

A.

Deploy two Azure Firewall instances and Azure Firewall Manager.

B.

Filter traffic by using outbound rules.

C.

Filter traffic by using infrastructure rules.

D.

Filter traffic by using inbound rules.

E.

Deploy a network security group (NSG) and two application security groups.

F.

Deploy an Azure Firewall instance and Azure Firewall Manager.

Full Access
Question # 11

UESTION NO: 3

Which two roles should you assign to Admin2 to meet the security requirements? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A.

Desktop Virtualization Host Pool Contributor

B.

Desktop Virtualization Application Group Contributor

C.

Desktop Virtualization Workspace Contributor

D.

Desktop Virtualization Application Group Reader

E.

User Access Administrator

Full Access
Question # 12

You need to recommend an authentication solution that meets the performance requirements.

Which two actions should you include in the recommendation? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A.

Join all the session hosts to Azure AD.

B.

In each Azure region that will contain the Windows Virtual Desktop session hosts, create an Azure Active Directory Domain Service (Azure AD DS) managed domain.

C.

C. Deploy domain controllers for the on-premises Active Directory domain on Azure virtual machines.

D.

Deploy read-only domain controllers (RODCs) on Azure virtual machines.

E.

In each Azure region that will contain the Windows Virtual Desktop session hosts, create an Active Directory site.

Full Access
Question # 13

What should you do to ensure that the session hosts meet the application requirements for App1?

A.

Modify the Display settings for the host pool.

B.

Modify the Connection information settings for the host pool.

C.

Modify the Session behavior settings for the host pool.

D.

Assign a scaling plan to the host pool.

Full Access
Question # 14

Which settings should you configure to meet the performance requirements?

A.

Load balancing for each session host

B.

Scaling plan for the host pool

C.

Properties for each session host

D.

Properties for the host pool

Full Access
Question # 15

What should you do to meet the user profile requirements?

A.

Create a new Azure Blob Storage account.

B.

Join storage1 to the AD DS domain.

C.

Create a new Azure Files share.

D.

Join storage1 to the Microsoft Entra Domain Services managed domain.

Full Access
Question # 16

You need to create a Conditional Access policy to meet the security require-ments.

How should you configure the policy? To answer, select the appropriate options in the answer area.

Full Access
Question # 17

What should you do to meet the application requirements? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 18

Which type of host pool and load balancing algorithm should you configure to meet the performance requirements? To answer, select the appropriate options in The answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 19

Which host pool design and which service should you configure to meet the disaster recovery requirements? To answer, drag the appropriate solution to the correct requirements. Each solution may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content

NOTE: Each correct selection is worth one point.

Full Access
Question # 20

Which three PowerShell modules should you install on Server1 to meet the technical requirements? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A.

Pester

B.

RemoteDesktop

C.

ServerManager

D.

ActiveDirectory

E.

Hyper-V

Full Access
Question # 21

Which role should you assign to Operator2 to meet the technical requirements?

A.

Desktop Virtualization Session Host Operator

B.

Desktop Virtualization Host Pool Contributor

C.

Desktop Virtualization User Session Operator

D.

Desktop Virtualization Contributor

Full Access
Question # 22

Which two actions should you perform to meet the security requirements for Defender for Endpoint? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

A.

Create an app attach image for the Azure Virtual Desktop deployment.

B.

Use a Group Policy Object (GPO) to run an onboarding script from a shared location.

C.

Add a Defender for Endpoint onboarding script to VM1 and run the script at first startup.

D.

Run a Defender for Endpoint onboarding script on VM1 before generalizing the VM1 source image.

Full Access
Question # 23

You need to prepare the disk on VM1 for use with the Azure Virtual Desktop deployment. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

A.

Convert the disk format to VHD.

B.

Merge the disk.

C.

Convert the disk type to Fixed size.

D.

Compact the disk.

E.

Convert the disk type to Differencing.

Full Access
Question # 24

You need to configure the device redirection settings. The solution must meet the technical requirements.

Where should you configure the settings?

A.

Workspace1

B.

MontrealUsers

C.

Group1

D.

Pool1

Full Access
Question # 25

You plan to implement the FSLogix profile containers for the Seattle office.

Which storage account should you use?

A.

storage2

B.

storage4

C.

storage3

D.

storage1

Full Access
Question # 26

You need to evaluate the RDS deployment in the Seattle office. The solution must meet the technical requirements.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Full Access
Question # 27

What should you configure to meet the networking requirements?

A.

an on-premises data gateway

B.

the Networking settings for the host pool

C.

a Site-to-Site (S2S) VPN connection

D.

a Point-to-Site (P2S) VPN connection

Full Access
Question # 28

Which monitoring solution should you configure to meet the security requirements?

A.

VM insights

B.

Azure Virtual Desktop Insights

C.

Application Insights

D.

Azure Monitor activity log insights

Full Access
Question # 29

Which users can create Pool4, and which users can join session hosts to the domain? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 30

You need to configure the virtual machines that have the Pool1 prefix. The solution must meet the technical requirements.

What should you use?

A.

a Windows Virtual Desktop automation task

B.

Virtual machine auto-shutdown

C.

Service Health in Azure Monitor

D.

Azure Automation

Full Access
Question # 31

Which setting should you modify for VNET4 before you can deploy Pool4?

A.

Service endpoints

B.

Address space

C.

DNS servers

D.

Access control (IAM)

E.

Peerings

Full Access
Question # 32

You are planning the deployment of Pool4.

What will be the maximum number of users that can connect to Pool4, and how many session hosts are needed to support five concurrent user sessions? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 33

You have an Azure subscription that contains a user named User1 and an Azure Virtual Desktop host pool named Pool1. Pool1 contains the session hosts shown in the following table.

You have the devices shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Full Access
Question # 34

You have an Azure subscription that contains an Azure Virtual Desktop host pool named Pool1 All the session hosts in Pool! are Microsoft Entra joined.

Users connect to Pool1 by using macOS devices.

You need to ensure that remote users can authenticate to RemoteApp sessions by using their Microsoft Entra credentials.

Which RDP property should you configure?

A.

authentication level: i:1

B.

targetisoadjoined: i:1

C.

enablerdsaadauth: i:1

D.

promptcredentialonce: i:0

Full Access
Question # 35

You have an Azure Virtual Desktop Deployment that contains a workspace named Workspace1 and a user named User1. Workspace1 contains a Desktop application group named Pool1Desktop.

At 09:00, you create a conditional access policy that has the following settings:

    Assignments:

- Users and groups: User1

- Cloud apps or actions: Azure Virtual Desktop

- Conditions: 0 conditions selected

    Access controls

- Grant: Grant access, Require multi-factor authentication

- Sessions: Sign-in frequency 1 hour

User1 performs the actions shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Full Access
Question # 36

You have an Azure Virtual Desktop deployment that contains the resources shown in the following table.

You need to ensure that users can connect to a session host in the deallocated state. On which resources can you enable Start VM on Connect?

A.

Azure virtual machines

B.

P1-0 and P1-1

C.

Pool1 only

D.

Workspace1 only

Full Access
Question # 37

You have a new Azure subscription that uses Azure Virtual Desktop.

You need to ensure that users who connect to Azure Virtual Desktop sessions reauthenticate every six hours. What should you do first?

A.

Configure multi-factor authentication (MFA).

B.

Configure an authentication methods policy.

C.

Disable Security defaults.

D.

Create a Conditional Access policy.

Full Access
Question # 38

You have an Azure Virtual Desktop deployment that contains a host pool. The host pool contains 10 session hosts. The session hosts are configured by using a custom image and ephemeral disks.

You need to deploy Microsoft OneDrive for Business.

Which two actions should you perform for each session host? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A.

Install FSLogix.

B.

Install the OneDrive sync app by using the per-machine installation option.

C.

Implement Application Masking.

D.

Install the OneDrive sync app by using the per-user installation option.

E.

Deploy an MSIX app attach package.

Full Access
Question # 39

-

You have an Azure Virtual Desktop deployment and two Azure Active Directory groups named Group1 and Group2.

You create two Conditional Access policies named Policy1 and Policy2. Policy1 is assigned to Group1. Policy2 is assigned to Group2. Both policies include Azure Virtual Desktop as a cloud app.

You need to meet the following requirements:

• The users in Group1 must be prompted for multi-factor authentication (MFA) when they connect to Azure Virtual Desktop.

• The users in Group2 must reauthenticate every eight hours while they are connected to Azure Virtual Desktop.

Which settings should you configure in Policy1 and Policy2? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 40

You have an Azure Virtual Desktop deployment.

You plan to deploy Update Management to manage automated updates for server-based session hosts.

You need to configure the prerequisites for Update Management.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A.

Create a Log Analytics workspace.

B.

Create an Azure Automation account.

C.

Create an Azure Service Health alert rule.

D.

Enable the Application Insights Agent.

E.

Configure Azure Network Watcher.

Full Access