AZ-140: Configuring and Operating Windows Virtual Desktop on Microsoft Azure Part 4
Question #: 213
Topic #: 2
You have an Azure compute gallery that contains the Windows 10 images shown in the following table.
You create an Azure Virtual Desktop deployment that has the following settings:
• Host pool name: Pool1
• Location: West US
• Host pool type: Personal
Which images can you use for the session hosts?
A. Image1 only
B. Image2 only
C. Image1 and Image2 only
D. Image1 and Image3 only
E. Image1, Image2, Image3, and Image4
Selected Answer: C
Question #: 214
Topic #: 6
You have an Azure Virtual Desktop deployment that contains a host pool named Pool1.
Pool1 contains two session hosts.
You create a new virtual machine named Host3 that runs Windows 11.
You need to add Host3 as a third session host to Pool1.
What should you do first?
A. Generate a registration key.
B. Assign a scaling plan to Pool1.
C. Generate a certificate for Host3.
D. Deallocate the existing session hosts.
Selected Answer: A
Question #: 215
Topic #: 5
You have an Azure Virtual Desktop pooled host pool named HostPool1.
You need to dynamically allocate resources to HostPool1 based on the number of sessions for each host.
What should you create?
A. a load balancer rule
B. a scaling plan
C. a virtual machine scale set
D. an availability set
Selected Answer: B
Question #: 216
Topic #: 4
You have an Azure Virtual Desktop deployment that contains a host pool. The host pool contains 10 session hosts. The session hosts are configured by using a custom image and ephemeral disks.
You need to deploy Microsoft OneDrive for Business.
Which two actions should you perform for each session host? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Install FSLogix.
B. Install the OneDrive sync app by using the per-machine installation option.
C. Implement Application Masking.
D. Install the OneDrive sync app by using the per-user installation option.
E. Deploy an MSIX app attach package.
Selected Answer: AB
Question #: 218
Topic #: 3
You have an Azure Virtual Desktop deployment that contains a host pool named Pool1.
You plan to create a Windows 10 image named Image1 to deploy new session hosts to Pool1.
You need to ensure that all the new session hosts deployed by using Image1 are onboarded to Microsoft Defender for Endpoint.
What should you do?
A. Run a Defender for Endpoint onboarding script on Image1, and then run sysprep.
B. Add a Defender for Endpoint onboarding script to image1, and then run the script at first start.
C. Create an MSIX package for Pool1.
D. Create an automation task for Pool1.
Selected Answer: B
Question #: 219
Topic #: 6
You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 has the following settings:
• Host pool type: Pooled
• Load balancing algorithm: Breadth-first
• Max session limit: 5
• Start VM on connect: Yes
Pool1 contains the session hosts shown in the following table.
How many additional users must connect to Pool1 to start Host3?
A. 1
B. 3
C. 5
D. 6
E. 10
Selected Answer: D
Question #: 220
Topic #: 4
You have an Azure Virtual Desktop deployment that contains a session host named Host1.
You need to configure Windows Defender Firewall to allow inbound network traffic for RDP Shortpath on Host1.
Which program in the C:\Windows\System32 folder should you specify in the inbound firewall rule?
A. Rdpshell.exe
B. Svchost.exe
C. Raserver.exe
D. Mstsc.exe
Selected Answer: B
Question #: 221
Topic #: 2
You have an Azure AD tenant that contains a resource group named RG1. RG1 contains the resources shown in the following table.
Your on-premises network has an IP address range of 192.168.10.0/24. Users on Host1 can successfully connect to the resources on the network.
You add a new on-premises network that has an IP address range of 192.168.11.0/24 and contains a subnet. The subnet contains an application server named App1.
Users report that Host1 cannot connect to App1.
You need to ensure that the users on Host1 can access App1.
What should you modify?
A. the Connections settings of VPNGW1
B. the Subnets setting of VNet1
C. the Configuration settings of LNGW1
D. the DNS server settings of VNet1
E. the RDP Properties of the host pool
Selected Answer: C
Question #: 225
Topic #: 5
You have an Azure Virtual Desktop personal host pool named Pool1 that contains 20 Azure AD-joined session hosts.
You need to ensure that only approved virtual machine extensions are installed on the Pool 1 session hosts. The solution must minimize administrative effort.
What should you use?
A. Azure Resource Manager (ARM) templates
B. Azure Policy
C. Windows Admin Center
D. Group Policy
Selected Answer: B
Question #: 226
Topic #: 2
You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains 10 session hosts that were deployed by using an Azure Resource Manager (ARM) template.
You discover that Windows licenses were NOT applied to the session hosts.
You need to use a PowerShell script to update the licenses.
Which cmdlet should you include in the solution?
A. Update-AzVm
B. Update-AzWvdDesktop
C. Update-AzWvdHostPool
D. Update-AzWvdWorkspace
E. Update-AzWvdSessionHost
Selected Answer: A
Question #: 234
Topic #: 5
You have an Azure Virtual Desktop deployment that contains two Azure regions.
You plan to implement a disaster recovery solution for user profiles. The solution must meet the following requirements:
• Users must retain their user profiles if a single region fails.
• Administrative effort must be minimized.
What should you include in the recommendation?
A. Azure Storage accounts that use zone-redundant storage (ZRS)
B. Azure Site Recovery
C. FSLogix Cloud Cache
D. Azure Backup
E. FSLogix with VHDLocations
Selected Answer: C
Question #: 235
Topic #: 6
You have an Azure Virtual Desktop deployment that contains the host pools shown in the following table.
VNet1, VNet2, and VNet3 are peered.
You plan to use Azure Bastion to provide secure administrative access to all the session hosts. The solution must minimize costs.
How many Azure Bastion hosts should you deploy?
A. 1
B. 2
C. 3
D. 4
Selected Answer: A
Question #: 239
Topic #: 6
You have an Azure subscription that is linked to a hybrid Microsoft Entra tenant.
You have an Azure Virtual Desktop deployment that contains the host pools shown in the following table.
All the session hosts are Microsoft Entra joined.
You plan to implement FSLogix profile containers and store them on an Azure Files share named share1.
Which host pools contain session hosts that can access the FSLogix profile containers on share1?
A. Pool1 only
B. Pool1 and Pool2 only
C. Pool1 and Pool3 only
D. Pool1, Pool2, and Pool3 only
E. Pool1, Pool2, Pool3, and Pool4
Selected Answer: E
Question #: 243
Topic #: 3
Your on-premises network contains an Active Directory Domain Services (AD DS) domain named contoso.com.
You have an Azure subscription that is linked to a Microsoft Entra tenant named contoso.onmicrosoft.com. Contoso.com syncs with contoso.onmicrosoft.com.
You have a partner company that has a Microsoft Entra tenant named fabrikam.com.
Contoso.onmicrosoft.com contains the resources shown in the following table.
You deploy an Azure Virtual Desktop host pool named Pool1. Pool1 contains 10 session hosts that are joined to Contoso.com.
You assign Group1 to the application group in Pool1.
You need to identify which users will be able to sign in to the session hosts in Pool1.
Which users should you identify?
A. User1 only
B. User1 and User2 only
C. User1 and User3 only
D. User1, User2, and User3
Selected Answer: A
Question #: 247
Topic #: 3
You have an Azure Virtual Desktop deployment that contains a host pool named Pool1.
Pool1 contains 10 session hosts.
You need to enable screen capture protection on all the session hosts in Pool1. The solution must minimize administrative effort.
What should you do?
A. From RDP Properties for Pool1, configure the Session behavior settings.
B. On each session host, configure a local Group Policy setting.
C. To each session host, add an extension.
D. From RDP Properties for Pool1, configure the Display settings.
Selected Answer: D
Question #: 250
Topic #: 3
You have an Azure Virtual Desktop deployment.
You need to secure administrative access to session hosts. The solution must require that administrators use the Azure portal to access the session hosts.
What should you include in the solution?
A. Azure Firewall
B. Azure Bastion
C. Conditional Access policies
D. Microsoft Defender for Cloud
Selected Answer: B
Question #: 251
Topic #: 6
You have an Azure Virtual Desktop deployment.
You use Hyper-V to create a virtual machine that runs Windows 10 and has the following configurations:
• Virtual machine generation: Generation 1
• Disk type: Dynamically expanding
• Disk format: VHDX
• Disk size: 2 TB
You need to prepare the virtual machine before uploading it to Azure.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Change the disk type to fixed.
B. Decrease the disk size to 1 TB.
C. Change the disk format to VHD.
D. Change the disk type to differencing.
E. Change the virtual machine generation to generation 2.
Selected Answer: AC
Question #: 253
Topic #: 3
You have an Azure Virtual Desktop deployment that contains a host pool named Pool1.
Pool1 contains session hosts that are joined to a Microsoft Entra Domain Services managed domain. The domain contains a user named User1.
You configure AADDC Computers GPO as shown in the following table.
You configure AADDC Users GPO as shown in the following table.
How long after connecting to a session host will User1 be disconnected?
A. 2 hours
B. 3 hours
C. 6 hours
D. 8 hours
Selected Answer: A
Question #: 254
Topic #: 5
You have an Azure Virtual Desktop deployment that contains a host pool named Pool1.
Pool1 contains two session hosts named Host1 and Host2 and has the following settings:
• Host pool type: Pooled
• Load balancing algorithm: Breadth-first
You plan to implement Quality of Service (QoS) policies to manage RDP connections to Host1 and Host2.
You need to ensure that the Azure Virtual Desktop deployment supports the QoS policies.
What should you do?
A. Modify the Load balancing algorithm setting for Pool1.
B. Enable RDP Shortpath on Host1 and Host2.
C. Assign a scaling plan to Pool1.
D. Apply an Azure tag on Host1 and Host2.
Selected Answer: B
Question #: 255
Topic #: 4
You have an Azure Virtual Desktop deployment that contains two host pools named Pooll and Pool2.
Pool1 contains 10 session hosts and supports 100 concurrent users. Pool2 contains two session hosts and supports 20 concurrent users.
You need to recommend an Azure Virtual Desktop update solution that meets the following requirements:
• All service updates must be tested before reaching general availability.
• Testing must have a minimal impact on the organization.
• No new host pools can be created.
What should you include in the recommendation?
A. From the properties of Pool1, enable the validation environment.
B. From the properties of Pool2, enable the validation environment.
C. From the properties of Pool1, assign a scaling plan.
D. From the properties of Pool2, assign a scaling plan.
Selected Answer: B
Question #: 259
Topic #: 5
You have an Azure Virtual Desktop host pool named Pool1. Pool1 contains session hosts that run Windows 11 Enterprise multi-session.
You need to use Performance Monitor to troubleshoot a poor frame quality issue that is affecting a current user session to Pool1.
Which performance counter should you use?
A. RemoteFX Graphics
B. Terminal Services Session
C. GPU Engine
D. Terminal Services
Selected Answer: A
Question #: 262
Topic #: 6
You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. All the session hosts in Pool are Microsoft Entra joined.
You have 50 users that will access the deployment by using devices that run Linux.
You need to ensure that the users can sign in to the deployment.
Which custom RDP property should you configure?
A. Targetisaadjoined
B. Enablecredsspsupport
C. securitymode
D. authentication level
Selected Answer: A
Question #: 263
Topic #: 3
You have an Azure Virtual Desktop deployment that contains five session hosts.
You have users that work from offices in Seattle and Vancouver. The users connect to the session hosts over the internet.
You need to ensure that the users can connect to the session hosts from only the Seattle and Vancouver offices.
What should you use?
A. Conditional Access
B. RDP Shortpath
C. a network security group (NSG)
D. Azure Firewall
Selected Answer: A
Question #: 265
Topic #: 3
You have an Azure subscription that contains two users named User1 and User2 and the Microsoft Entra groups shown in the following table.
You have an Azure Virtual Desktop host pool named Pool1 that contains two session hosts named Host1 and Host2. The session hosts use FSLogix user profiles.
Host1 contains the local groups shown in the following table.
Host2 contains the local groups shown in the following table.
User1 connects to Pool and modifies his desktop.
User1 reports that when he reconnects to Pool, the desktop modifications fail to appear.
You need to ensure that User1 sees the modified desktop when he connects to Pool. The solution must minimize the impact on other user profiles.
What should you do?
A. Add User1 to both FSLogix Profile Include list groups.
B. Remove Group2 from both FSLogix Profile Exclude list groups.
C. Remove User1 from Group3.
D. Remove Group3 from Group2.
Selected Answer: C
Question #: 266
Topic #: 4
You have an Azure Virtual Desktop deployment.
You plan to create the host pools shown in the following table.
You plan to provide external users with access to the session hosts.
You need to ensure that connections to Azure Virtual Desktop are licensed by using per-user access pricing.
To which host pools will per-user access pricing apply?
A. Pool1 only
B. Pool4 only
C. Pool1 and Pool2 only
D. Pool1 and Pool4 only
E. Pool3 and Pool4 only
Selected Answer: C
Question #: 267
Topic #: 6
You have an Azure Virtual Desktop deployment.
You plan to deploy the host pools shown in the following table.
For which host pools can you configure a load-balancing algorithm?
A. Pool1 and Pool3 only
B. Pool1 and Pool4 only
C. Pool2 and Pool3 only
D. Pool1, Pool2, and Pool3 only
E. Pool1, Pool2, Pool3, and Pool4
Selected Answer: B
Question #: 270
Topic #: 4
You have an Azure Virtual Desktop deployment.
You need to add a new application for a RemoteApp application group. The application must be available only during a user session.
What should you use as an application source?
A. FSLogix Profile Container
B. file path
C. start menu
D. app attach
Selected Answer: B
Question #: 271
Topic #: 5
You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains five Windows 11 session hosts.
You need to identify which Azure Virtual Desktop client app versions are used to connect to the session hosts in Pool1.
What should you use?
A. Applications insights
B. Azure Virtual Desktop Insights
C. Insights for virtual machines
D. Insights for Pool1
Selected Answer: B
Question #: 274
Topic #: 4
You have an Azure subscription that contains an Azure Virtual Desktop deployment. The deployment contains a host pool named Pool.
Users access the deployment by using the Windows client for Azure Virtual Desktop.
You need to ensure that the users must reauthenticate every eight hours. The solution must minimize administrative effort.
What should you do?
A. From the Microsoft Entra admin center, create a Conditional Access policy.
B. From the Microsoft Entra admin center, configure the User settings.
C. Define Pool1 as a validation environment.
D. For each session host, configure just-in-time (JIT) VM access.
Selected Answer: A
Question #: 276
Topic #: 6
Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.
After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.
You have an Azure subscription named Sub1 that contains the resources shown in the following table.
You have a user named Admin1 that is assigned the Desktop Virtualization Contributor role for Sub1.
You need to ensure that Admin1 can assign Scaling1 to Pool1.
Solution: You assign the Azure Virtual Desktop service principal the Owner role for Sub1.
Does this meet the goal?
A. Yes
B. No
Selected Answer: A
Question #: 277
Topic #: 4
You have an Azure Virtual Desktop host pool named Pool1. All the session hosts in Pool1 are assigned private IP addresses only.
You need to ensure that administrators can connect remotely to the session hosts. The solution must ensure that the administrators can connect to the session hosts by using Azure Command-Line Interface (CLI) and the Remote Desktop client for Windows.
What should you include in the solution?
A. Azure Application Gateway WAF_v2
B. Azure Front Door Standard
C. Azure Bastion Standard
D. Azure Application Gateway Standard_v2
Selected Answer: C
Question #: 279
Topic #: 6
Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.
After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.
You have an Azure subscription named Sub1 that contains the resources shown in the following table.
You have a user named Admin1 that is assigned the Desktop Virtualization Contributor role for Sub1.
You need to ensure that Admin1 can assign Scaling1 to Pool1.
Solution: You assign Admin1 the Owner role for Sub1.
Does this meet the goal?
A. Yes
B. No
Selected Answer: A
Question #: 280
Topic #: 4
You have an Azure subscription named Sub1 and a Microsoft 365 E5 subscription.
The tenant contains user accounts for all internal users and users from a partner company named Fabrikam, Inc. Each internal user is assigned a Microsoft 365 E5 license. The users at Fabrikam are not assigned any licenses.
Sub1 has an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains a RemoteApp named App1.
You need to configure access to App1. The solution must meet the following requirements:
• The Fabrikam users must be licensed by using Per-user access pricing.
• App1 must be accessible to all the internal and Fabrikam users.
• Costs must be minimized.
What should you do first?
A. Add the Fabrikam users to the application group that contains App1.
B. Add a new host pool to Sub1.
C. Assign a Microsoft 365 F3 license to each Fabrikam user.
D. Add a new host pool to a new subscription.
Selected Answer: A
Question #: 281
Topic #: 4
You have an Azure subscription named Sub1 and a Microsoft 365 E5 subscription.
The tenant contains user accounts for all internal users and users from a partner company named Fabrikam, Inc. Each internal user is assigned a Microsoft 365 E5 license. The users at Fabrikam are not assigned any licenses.
Sub1 has an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains a RemoteApp named App1.
You need to configure access to App1. The solution must meet the following requirements:
• The Fabrikam users must be licensed by using Per-user access pricing.
• App1 must be accessible to all the internal and Fabrikam users.
• Costs must be minimized.
What should you do first?
A. Add the Fabrikam users to the application group that contains App1.
B. Add a new host pool to Sub1.
C. Assign a Microsoft 365 F3 license to each Fabrikam user.
D. Add a new host pool to a new subscription.
Selected Answer: A
Question #: 282
Topic #: 6
Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.
After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.
You have an Azure subscription named Sub1 that contains the resources shown in the following table.
You have a user named Admin1 that is assigned the Desktop Virtualization Contributor role for Sub1.
You need to ensure that Admin1 can assign Scaling1 to Pool1.
Solution: You assign Admin1 the User Access Administrator role for Sub1.
Does this meet the goal?
A. Yes
B. No
Selected Answer: A
Question #: 283
Topic #: 6
You have an Azure subscription that contains the storage accounts shown in the following table.
You deploy Azure Virtual Desktop. All the session hosts in the deployment are joined to Active Directory.
You need to implement FSLogix profile containers.
Which storage accounts can you use to store the profile containers?
A. storage1 only
B. storage4 only
C. storage1 and storage4 only
D. storage2, storage3, and storage4 only
E. storage1, storage2, storage3, and storage4
Selected Answer: C
Question #: 284
Topic #: 4
You have an Azure Virtual Desktop deployment that contains the host pools shown in the following table.
You plan to use app attach.
In which host pools can the session hosts use app attach?
A. Pool1 and Pool2 only
B. Pool1 and Pool3 only
C. Pool2 and Pool4 only
D. Pool1, Pool2, and Pool3 only
E. Pool1, Pool2, Pool3, and Pool4
Selected Answer: A
Question #: 285
Topic #: 6
Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.
After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.
You have an Azure subscription named Sub1 that contains the resources shown in the following table.
You have a user named Admin1 that is assigned the Desktop Virtualization Contributor role for Sub1.
You need to ensure that Admin1 can assign Scaling1 to Pool1.
Solution: You assign the Azure Virtual Desktop service principal the User Access Administrator role for Sub1.
Does this meet the goal?
A. Yes
B. No
Selected Answer: B
Question #: 286
Topic #: 4
You have an Azure Virtual Desktop deployment that contains a host pool named Pool1.
Pool1 contains two session hosts that are Microsoft Entra joined.
You need to configure single sign-on (SSO) to connect to the session hosts. The solution must enable Microsoft Entra authentication for Remote Desktop Protocol (RDP) in the Microsoft Entra tenant.
Which application requires that you modify the remoteDesktopSecurityConfiguration object?
A. Windows Cloud Login
B. Microsoft Azure Windows Virtual Machine Sign-in
C. Windows 365
D. Azure Virtual Desktop
Selected Answer: A
