Halloween Sale Special - 75% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: my75ex

Home > Microsoft > Microsoft Certified: Windows Virtual Desktop Specialty > AZ-140

AZ-140 Configuring and Operating Microsoft Azure Virtual Desktop Question and Answers

Question # 4

You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains session hosts that run a line-of-business (LOB) app named App1.

You have an Azure Compute Gallery that contains the following image:

• Image definition: Image1

• Image version: 1.1.1

Image version 1.1.1 was used to deploy all the current session hosts.

You plan to deploy a new virtual machine named VM1 as a source for a new image version that will contain an update for App1.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Full Access
Question # 5

You have an Azure Virtual Desktop deployment that contains a host pool named Pool1.

Pool1 contains 10 session hosts.

You need to enable screen capture protection on all the session hosts in Pool1. The solution must minimize administrative effort.

What should you do?

A.

From RDP Properties for Pool1. configure the Session behaviour settings.

B.

To each session host, add an extension.

C.

From RDP Properties for Pool1, configure the Display settings.

D.

On each session host, configure a local Group Policy setting.

Full Access
Question # 6

You have an A2ure subscription that contains the resources shown in the following table.

You have a virtual machine named Sever 1 that runs Windows Server and is connected to VNet3.

Full Access
Question # 7

Your on-premises network contains 20 Windows 10 devices.

You have an Azure Virtual Desktop deployment.

You need to deploy the Microsoft Remote Desktop client (MSRDC) to the devices. The MSRDC must be available to everyone who sign in to the devices.

What should you do?

A.

Install the MSRDC by using msiexec.exe and the ALLUSERS=1 command line option.

B.

Install the MSRDC by using msiexec.exe and the ALLUSERS=2 command line option.

C.

Install the MSRDC by using msiexec.exe and the MSIINSTALLPERUSER=1 command line option.

Full Access
Question # 8

You have an Azure Virtual Desktop host pool that uses FSlogix user profiles. The user profiles are stored in an Azure Files share named share1.

You need to back up share1 by using Azure Backup.

What should you create first? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

A.

an Azure Backup vault

B.

an Azure Storage account

C.

an Azure Recovery Services vault

D.

an Azure Files share

Full Access
Question # 9

You have an Azure Virtual Desktop deployment and the Azure Storage accounts shown in the following table.

You plan to create FSLogix profile containers and store the containers in the storage accounts.

You need to identify which storage accounts support the FSlogix profile containers, and then order the accounts from highest to lowest redundancy.

Which three storage accounts should you identify in sequence? To answer, move the appropriate accounts from the list of accounts to the answer area and arrange them in the correct order.

Full Access
Question # 10

You have an Azure Virtual Desktop deployment that contains two Azure regions.

You plan to implement a disaster recovery solution for user profiles. The solution must meet the following requirements:

• Users must retain their user profiles if a single region fails.

• Administrative effort must be minimized.

What should you include in the recommendation?

A.

Azure Site Recovery

B.

Azure Storage accounts that use zone-redundant storage (ZRS)

C.

FSLogrxwith VHDLocations

D.

FSLogix Cloud Cache

E.

Azure Backup

Full Access
Question # 11

You have an Azure subscription named Subscription that contains an Azure Virtual Desktop host pool named HostPool1.

HostPool1 is managed by using Microsoft Intune. Subscription1 contains 50 users that connect to HostPool1 by using computers that run Windows 10.

You need to prevent the users from copying files between an Azure Virtual Desktop session and the computers. The solution must minimize administrative effort.

What should you do?

A.

Modify the RDP properties of HostPool1.

B.

Create a Conditional Access policy in Azure Active Directory (Azure AD).

C.

Create a compliance policy in Intune.

D.

Create a configuration profile in Intune.

Full Access
Question # 12

You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains the session hosts shown in the following table.

You have two internal users named User1 arndUser2.

You plan to enable the following connectivity for the Azure Virtual Desktop deployment:

• User1 will connect to Host1.

• User2 will connect to Host2.

Which license should you recommend for each user? To answer, drag the appropriate licenses to the correct users. Each license may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Full Access
Question # 13

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Virtual Desktop host pool that runs Windows 10 Enterprise multi-session.

User sessions are load-balanced between the session hosts. Idle session timeout is 30 minutes.

You plan to shut down a session host named Host1 to perform routine maintenance.

You need to prevent new user sessions to Host1 without disconnecting active user sessions.

Solution: you change the Drain mode of Host1.

Does this meet the goal?

A.

Yes

B.

No

Full Access
Question # 14

You have a shared image gallery that contains the Windows 10 images shown in the following table.

You create a Windows Virtual Desktop deployment that has the following settings:

    Host pool name: Pool1

    Location: West US

    Host pool type: Personal

Which images can you use for the session hosts?

A.

Image1 only

B.

Image1, Image2, Image3, and Image4

C.

Image2 only

D.

Image1 and Image2 only

E.

Image1 and Image3 only

Full Access
Question # 15

You have an Azure Virtual Desktop deployment that contains the resources shown in the following table.

Which resource supports the connection target sub-resource, feed target sub-resource, and global target sub-resource of each private endpoint? To answer, drag the appropriate resources to the correct target sub-resources. Each resource may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Full Access
Question # 16

You have an Azure Virtual Desktop host pool named Pool1 and an Azure Storage account named storage1. Pool1 and storage1 are in the same Azure region.

The current network utilization of the session hosts during peak hours is 95%.

You plan to use FSLogix profile containers stored in storage1 for users that connect to Pool1.

You need to configure the session hosts and storage1 to minimize network latency when loading and updating profiles.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 17

You have an Azure subscription named Sub1 and a Microsoft 365 E5 subscription.

The tenant contains user accounts for all internal users and users from a partner company named Fabrikam, Inc. Each internal user is assigned a Microsoft 365 E5 license. The users at Fabrikam are not assigned any licenses.

Sub1 has an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains a RemoteApp named Appl.

You need to configure access to App1. The solution must meet the following requirements:

• The Fabrikam users must be licensed by using Per-user access pricing.

• App1 must be accessible to all the internal and Fabrikam users.

• Costs must be minimized.

What should you do first?

A.

Add a new host pool to Sub1.

B.

Assign a Microsoft 365 F3 license to each Fabrikam user.

C.

Add a new host pool to a new Azure subscription.

D.

Add the Fabrikam users to the application group that contains App1.

Full Access
Question # 18

You have a Windows Virtual Desktop host pool named Pool1 that runs Windows 10 Enterprise multi-session hosts.

You need to use Performance Monitor to troubleshoot a low frame quality issue that is affecting a current use session to Pool1.

What should you run to retrieve the user session ID?

A.

Get-ComputerInfo

B.

qwinsta

C.

whoami

D.

Get-LocalUser

Full Access
Question # 19

You have an Azure Virtual Desktop deployment.

Users connect to session hosts by using devices enrolled in Microsoft Intune.

You need to create a Conditional Access policy named Policy1 to meet the following requirements:

• Require multifactor authentication (MFA).

• Require that the devices be marked as compliant.

Which settings of Policy1 should you configure for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Full Access
Question # 20

You have an Azure Active Directory (Azure AD) tenant named contoso.com.

You use a user account named Admin1 to deploy an Azure Active Directory Domain Services (Azure AD DS) managed domain named aaddscontoso.com to a virtual network named VNET1.

You plan to deploy an Azure Virtual Desktop host pool named Pool1 to VNET1.

You need to ensure that you can use the Admin1 user account to deploy Windows 10 Enterprise session hosts to Pool1.

What should you do first?

A.

Add Admin1 to the AA Change Host pool type to Pooled and specify Load D DC Administrators group ofcontoso.com.

B.

Assign the Cloud device administrator role to Admin1.

C.

Assign a Microsoft 365 Enterprise E3 license to Admin1.

D.

Change the password of Admin1.

Full Access
Question # 21

You have an Azure Virtual Desktop deployment.

You plan to implement FSLogix profiles for the deployment.

You need to configure NTFS permissions for the file share that will store the FSLogix profiles. The solution must follow the principle of least privilege.

At which level should you apply permissions for CREATOR OWNER?

A.

Files only

B.

This folder only

C.

Subfolders and files only

D.

This folder, subfolders and files

Full Access
Question # 22

You have an Azure subscription that is linked to a Microsoft Entra hybrid tenant named contoso.com. The subscription contains the resources shown in the following table.

You create a new Azure Virtual Desktop host pool named HP01.

You plan to deploy new session hosts to HP01. The session hosts will be connected to VNetO1.

You need to ensure that the new session hosts can join contoso.com. The solution must minimize administrative effort.

What should you configure first?

A.

the Configuration settings of VPN01

B.

the DNS servers settings of VNet01

C.

the default subnet settings of VNet01

D.

the RDP Properties settings of HP01

Full Access
Question # 23

You have a Microsoft Entra tenant named contoso.com and an Azure Virtual Desktop deployment. You have a RemoteApp app group named RemoteAppV

You have a partner company named Fabrikam, Inc. that has 200 users. The users require access to RemoteApp1. You need to identify which type of pricing is associated with providing RemoteAppI access to the Fabrikam users. What should you identify?

A.

compute only

B.

compute, storage, and networking only

C.

Azure Virtual Desktop per-user access and compute only

D.

Azure Virtual Desktop per-user access only

E.

Azure Virtual Desktop per-user access, compute, storage, and networking

Full Access
Question # 24

You have a Azure Virtual Desktop host pool that contains live session hosts. The session hosts run Windows 10 Enterprise multi-session.

You need to prevent users from accessing the internet from Azure Virtual Desktop sessions. The session hosts must be allowed to access all the required Microsoft services.

Solution: You configure the RDP Properties of the host pool.

Does This meet the goal?

A.

Yes

B.

No

Full Access
Question # 25

You need to implement network security to meet the security requirements and the performance requirements.

Which two actions should you perform? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

A.

Deploy two Azure Firewall instances and Azure Firewall Manager.

B.

Filter traffic by using outbound rules.

C.

Filter traffic by using infrastructure rules.

D.

Filter traffic by using inbound rules.

E.

Deploy a network security group (NSG) and two application security groups.

F.

Deploy an Azure Firewall instance and Azure Firewall Manager.

Full Access
Question # 26

You need to configure the user settings of Admin1 to meet the user profile requirements.

What should you do?

A.

Modify the membership of the FSLogix ODFC Exclude List group.

B.

Modify the membership of the FSLogix Profile Exclude List group.

C.

Modify the HKLM\SOFTWARE\FSLogix\Profiles registry settings.

D.

Modify the HKLM\SOFTWARE\FSLogix\ODFC registry settings.

Full Access
Question # 27

You need to modify the custom virtual machine images to meet the deployment requirements.

What should you install?

A.

the RSAT: Remote Desktop Services Tools optional feature

B.

the Azure Virtual Desktop Agent

C.

the Microsoft Monitoring Agent

D.

the FSLogix agent

Full Access
Question # 28

You need to recommend an authentication solution that meets the performance requirements.

Which two actions should you include in the recommendation? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A.

Join all the session hosts to Azure AD.

B.

In each Azure region that will contain the Windows Virtual Desktop session hosts, create an Azure Active Directory Domain Service (Azure AD DS) managed domain.

C.

Deploy domain controllers for the on-premises Active Directory domain on Azure virtual machines.

D.

Deploy read-only domain controllers (RODCs) on Azure virtual machines.

E.

In each Azure region that will contain the Windows Virtual Desktop session hosts, create an Active Directory site.

Full Access
Question # 29

You need to ensure that you can implement user profile shares for the Boston office users. The solution must meet the user profile requirements.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Full Access
Question # 30

You need to recommend a DNS infrastructure that meet the performance requirements. What should you recommend? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Full Access
Question # 31

You need to deploy the session hosts to meet the deployment requirements Which PowerShell cmdlel should you run first?

A.

New-AzwvdRegistratrationinfo

B.

Get-AzApiManagementSsoToken

C.

Set-AzWMADDomainExtension

D.

Update-AZwvdSessionHost

Full Access
Question # 32

You need to ensure the resiliency of the user profiles for the Boston office users. The solution must meet the user performance requirements.

What should you do?

A.

Modify the Account kind setting of storage1.

B.

Modify the replication settings of storage1.

C.

Implement Azure Site Recovery.

D.

Configure Cloud Cache.

Full Access
Question # 33

You need to configure a conditional access policy to meet the authentication requirements.

What should you include in the policy configuration? To answer, select the appropriate options in the answer area.

NOTE Each correct selection is worth one point.

Full Access
Question # 34

Which two roles should you assign to Admin2 to meet the security requirements? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A.

Desktop Virtualization Host Pool Contributor

B.

Desktop Virtualization Application Group Contributor

C.

Desktop Virtualization Workspace Contributor

D.

Desktop Virtualization Application Group Reader

E.

User Access Administrator

Full Access
Question # 35

You need to prepare the disk on VM1 for use with the Azure Virtual Desktop deployment. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

A.

Convert the disk format to VHD.

B.

Merge the disk.

C.

Convert the disk type to Fixed size.

D.

Compact the disk.

E.

Convert the disk type to Differencing.

Full Access
Question # 36

Which type of host pool and load balancing algorithm should you configure to meet the performance requirements? To answer, select the appropriate options in The answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 37

What should you configure to meet the networking requirements?

A.

an on-premises data gateway

B.

the Networking settings for the host pool

C.

a Site-to-Site (S2S) VPN connection

D.

a Point-to-Site (P2S) VPN connection

Full Access
Question # 38

You need to create a Conditional Access policy to meet the security require-ments.

How should you configure the policy? To answer, select the appropriate options in the answer area.

Full Access
Question # 39

Which host pool design and which service should you configure to meet the disaster recovery requirements? To answer, drag the appropriate solution to the correct requirements. Each solution may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content

NOTE: Each correct selection is worth one point.

Full Access
Question # 40

What should you do to meet the user profile requirements?

A.

Create a new Azure Blob Storage account.

B.

Join storage1 to the AD DS domain.

C.

Create a new Azure Files share.

D.

Join storage1 to the Microsoft Entra Domain Services managed domain.

Full Access
Question # 41

Which monitoring solution should you configure to meet the security requirements?

A.

VM insights

B.

Azure Virtual Desktop Insights

C.

Application Insights

D.

Azure Monitor activity log insights

Full Access
Question # 42

What should you do to ensure that the session hosts meet the application requirements for App1?

A.

Modify the Display settings for the host pool.

B.

Modify the Connection information settings for the host pool.

C.

Modify the Session behavior settings for the host pool.

D.

Assign a scaling plan to the host pool.

Full Access
Question # 43

Which two actions should you perform to meet the security requirements for Defender for Endpoint? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

A.

Create an app attach image for the Azure Virtual Desktop deployment.

B.

Use a Group Policy Object (GPO) to run an onboarding script from a shared location.

C.

Add a Defender for Endpoint onboarding script to VM1 and run the script at first startup.

D.

Run a Defender for Endpoint onboarding script on VM1 before generalizing the VM1 source image.

Full Access
Question # 44

Which settings should you configure to meet the performance requirements?

A.

Load balancing for each session host

B.

Scaling plan for the host pool

C.

Properties for each session host

D.

Properties for the host pool

Full Access
Question # 45

What should you do to meet the application requirements? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 46

Which three PowerShell modules should you install on Server1 to meet the technical requirements? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A.

Pester

B.

RemoteDesktop

C.

ServerManager

D.

ActiveDirectory

E.

Hyper-V

Full Access
Question # 47

You plan to implement the FSLogix profile containers for the Seattle office.

Which storage account should you use?

A.

storage2

B.

storage4

C.

storage3

D.

storage1

Full Access
Question # 48

Which users can create Pool4, and which users can join session hosts to the domain? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access