Az 140
Az 140
Az 140
https://www.examtopics.com/exams/microsoft/az-140/view/
Topic 1
Question #1
Correct
Answer:
Reference:
https://jenzushsu.medium.com/configure-email-discovery-to-subscribe-to-your-
windows-virtual-desktop-feed-49dbb8db553c
https://docs.microsoft.com/en-us/azure/virtual-desktop/connect-ios
Question #2Topic 1
You have an Azure Active Directory (Azure AD) tenant named contoso.com and an
Azure virtual network named VNET1.
To VNET1, you deploy an Azure Active Directory Domain Services (Azure AD DS)
managed domain named litwareinc.com.
To VNET1, you plan to deploy a Azure Virtual Desktop host pool named Pool1.
You need to ensure that you can deploy Windows 10 Enterprise session hosts to
Pool1.
What should you do first?
You plan to deploy Azure Virtual Desktop for client access to remove virtualized
apps.
Which devices support the Remote Desktop client?
HOTSPOT -
You plan to deploy Azure Virtual Desktop.
Users have the devices shown in the following table.
From which device types can the users connect to Azure Virtual Desktop resources
by using the Remote Desktop client app and the Remote Desktop web client?
To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct
Answer:
Question #5Topic 1
HOTSPOT -
You have an Azure Virtual Desktop deployment.
You plan to create the host pools shown in the following table.
You need to recommend the virtual machine size for each host pool. The solution
must minimize costs.
Which size should you recommend for each pool? To answer, select the appropriate
options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
You plan to deploy Azure Virtual Desktop to meet the department requirements
shown in the following table.
You plan to use Azure Virtual Desktop host pools with load balancing and
autoscaling.
You need to recommend a host pool design that meets the requirements. The
solution must minimize costs.
What is the minimum number of host pools you should recommend?
A. 1
B. 2
C. 3 Most Voted
D. 4
Your company has a main office and two branch offices. Each office connects
directly to the internet. The router in each branch office is configured as an endpoint
for the following VPNs:
✑ A VPN connection to the main office
✑ A site-to-site VPN to Azure
The routers in each branch office have the Quality of Service (QoS) rules shown in
the following table.
Users in the branch office report slow responses and connection errors when they
attempt to connect to Azure Virtual Desktop resources.
You need to modify the QoS rules on the branch office routers to improve Azure
Virtual Desktop performance.
For which rule should you increase the bandwidth allocation?
A. Rule2
B. Rule3 Most Voted
C. Rule4
D. Rule1
You plan to deploy Azure Virtual Desktop. The deployment will use existing virtual
machines.
You create a Azure Virtual Desktop host pool.
You need to ensure that you can add the virtual machines to the host pool.
What should you do first?
A. Register the Microsoft.DesktopVirtualization provider.
B. Generate a registration key. Most Voted
C. Run the Invoke-AzVMRunCommand cmdlet.
D. Create a role assignment.
Question #9Topic 1
You have an Azure Virtual Desktop host pool named Pool1 in the East US region.
You have a storage account named storage1 that contains FSLogix profile
containers. In the East US region, you have a shared image gallery named SIG1 that
contains a virtual machine image named Image1. Image1 is used to create new
session hosts in Pool1.
You plan to deploy a new Azure Virtual Desktop host pool named Pool2 to the South
India region.
You need to implement a session host deployment solution for Pool2 that meets the
following requirements:
✑ Image1 must replicate in the South India region.
✑ The session hosts in Pool2 must be based on Image1.
✑ Changes to Image1 must be available in the South India and East US regions.
What should you include in the solution?
A. Create a new shared image gallery named SIG2 in the South India region. Upload a copy
of Image1 to SIG2.
B. Create a new Azure Storage account named storage2 in the South India region. Copy
Image1 to a shared folder in storage2.
C. From SIG1, update the replication for the latest image version of Image1. Most Voted
D. Configure geo-redundant storage (GRS) replication for storage1. Copy the VHD file of
Image1 to the FSLogix profile container.
HOTSPOT -
You have an on-premises network.
All users have computers that run Windows 10 Pro.
You plan to deploy Azure Virtual Desktop to meet the department requirements
shown in the following table.
You need to recommend licenses for the departments. The solution must minimize
costs.
Which license should you recommend for each department? To answer, select the
appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Hide Solution Discussion 8
Correct
Answer:
Reference:
https://docs.microsoft.com/en-us/azure/virtual-desktop/windows-10-multisession-faq
https://azure.microsoft.com/en-us/pricing/details/virtual-desktop/#pricing
Question #12Topic 1
Question #13Topic 1
A. 9.5 Mbps
B. 55 Mbps
C. 110 Mbps
D. 220 Mbps
The DNS servers are configured to forward requests to an external DNS service.
You create a new virtual network named VNET2 that is peered to VNET1 and has
gateway transit enabled.
You plan to implement an Azure Virtual Desktop host pool in VNET2. The session
hosts will be joined to the Active Directory domain.
You need to configure DNS to meet the following requirements:
✑ Ensure that Azure Virtual Desktop users can resolve on-premises servers and
Azure resources.
✑ Ensure that azure Virtual Desktop remains operational if a DNS server fails.
✑ Minimize administrative effort.
What should you configure?
A. the DNS settings of VNET2 to use Server2 and Server1 Most Voted
B. the DNS settings of VNET2 to use the Azure DNS service
C. the DNS settings of the virtual machines to use Server2 and Server1
D. the DNS settings of the virtual machines to use the Azure DNS service
HOTSPOT -
You have an Azure subscription that contains a hybrid Azure Active Directory (Azure
AD) tenant and two domain-joined Azure virtual machines. The virtual machines run
Windows Server 2019 and contain managed disks.
You plan to deploy an Azure Virtual Desktop host pool that will use a Storage
Spaces Direct Scale-Out File Server to host user profiles.
You need to ensure that the virtual machines can host the Storage Spaces Direct
deployment. The solution must meet the following requirements:
✑ Ensure that the user profiles are available if a single server fails.
✑ Minimize administrative effort.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct
Answer:
References:
https://docs.microsoft.com/en-us/windows-server/storage/storage-spaces/deploy-
storage-spaces-direct
Question #16Topic 1
You have the Azure Virtual Desktop deployment shown in the following table.
You plan to deploy a new host pool as shown in the following table.
You need to ensure that you can deploy the host pool.
What should you do?
You have an Azure subscription that contains 500 users. The users are assigned
Microsoft Office 365 E1 licenses.
You deploy an Azure Virtual Desktop solution that contains Windows 10 multi-
session hosts and streams a custom remote app named App1.
You need to ensure that the users are licensed to stream App1. The solution must
minimize costs.
Which license should you use?
A. Microsoft 365 E5
B. Office 365 E3
C. a Remote Desktop Services (RDS) client access license (CAL)
D. Windows 10 Enterprise E3
DRAG DROP -
You have an Azure subscription that contains a virtual machine named VM1. VM1
runs a customized version of Windows 10 Enterprise.
You generalize the operating system on VM1 and shut down the virtual machine.
You need to deploy additional virtual machines based on an image of VM1 by using
the Azure portal.
Which three actions should you perform in sequence? To answer, move the
appropriate actions from the list of actions to the answer area and arrange them in
the correct order.
Select and Place:
Hide Solution Discussion 12
Correct
Answer:
You have an Azure Virtual Desktop deployment that contains an Azure compute
gallery. The Azure compute gallery contains an image definition named
Definitions Definitionl contains the following image versions:
* 1.0.0
* 1.1.0
* 1.2.0
You need to ensure that when a virtual machine is created from the Azure compute
gallery, the 1.1.0 image version is used by default.
What should you do?
Target regions -
HOTSPOT
-
You have an Azure Virtual Desktop deployment and two Azure Active Directory
groups named Group1 and Group2.
You create two Conditional Access policies named Policy1 and Policy2. Policy1 is
assigned to Group1. Policy2 is assigned to Group2. Both policies include Azure
Virtual Desktop as a cloud app.
• The users in Group1 must be prompted for multi-factor authentication (MFA) when
they connect to Azure Virtual Desktop.
• The users in Group2 must reauthenticate every eight hours while they are
connected to Azure Virtual Desktop.
Which settings should you configure in Policy1 and Policy2? To answer, select the
appropriate options in the answer area.
Question #21Topic 1
HOTSPOT
-
You plan to deploy two Azure file shares named Share1 and Share2 that will be used
with Azure Virtual Desktop. Share1 will contain at least 100 GB of data and must be
stored on SSDs. Share2 must be able to switch between Transaction optimized and
Cool storage tiers and must be stored on HDDs.
You need to recommend which type of storage accounts to use for the shares. The
solution must minimize costs.
What should you recommend for each share? To answer, select the appropriate
options in the answer area.
Correct Answer:
Question #22Topic 1
DRAG DROP
-
Your on-premises network contains an Active Directory domain that syncs with an
Azure AD tenant.
You have an Azure Virtual Desktop host pool that contains Windows 11 session
hosts joined to the domain.
You need to configure Azure NetApp Files to store user profile containers.
Which four actions should you perform in sequence? To answer, move the
appropriate actions from the list of actions to the answer area and arrange them in
the correct order.
NOTE: More than one order of answer choices is correct. You will receive credit for
any of the correct orders you select.
Question #23Topic 1
DRAG DROP
-
You plan to create the host pools shown in the following table.
You need to recommend the virtual machine size for each host pool to meet the
session host requirements.
Hide Solution Discussion 3
Correct Answer:
Question #24Topic 1
HOTSPOT
-
Case study
-
This is a case study. Case studies are not timed separately. You can use as much
exam time as you would like to complete each case. However, there may be
additional case studies and sections on this exam. You must manage your time to
ensure that you are able to complete all questions included on this exam in the time
provided.
To answer the questions included in a case study, you will need to reference
information that is provided in the case study. Case studies might contain exhibits
and other resources that provide more information about the scenario that is
described in the case study. Each question is independent of the other questions in
this case study.
At the end of this case study, a review screen will appear. This screen allows you to
review your answers and to make changes before you move to the next section of
the exam. After you begin a new section, you cannot return to this section.
Overview
-
Litware, Inc. is a pharmaceutical company that has a main office in Boston, United
States, and a remote office in Chennai, India.
The Azure AD tenant contains the users shown in the following table.
Litware has a Microsoft 365 E5 subscription associated to the Azure AD tenant. All
users are assigned Microsoft 365 Enterprise E5 licenses.
Litware has an Azure subscription associated to the Azure AD tenant. The
subscription contains the resources shown in the following table.
Litware uses custom virtual machine images and custom scripts to automatically
provision Azure virtual machines and join the virtual machines to the on-premises
Active Directory domain.
The offices connect to each other by using a WAN link. Each office connects directly
to the internet.
All DNS queries for internet hosts are resolved by using DNS servers in the Boston
office, which point to root servers on the internet. The Chennai office has caching-
only DNS servers that forward queries to the DNS servers in the Boston office.
• Deploy Azure Virtual Desktop environments to the East US Azure region for the
users in the Boston office and to the South India Azure region for the users in the
Chennai office.
• Implement FSLogix profile containers.
• Optimize the custom virtual machine images for the Azure Virtual Desktop session
hosts.
• Use PowerShell to automate the addition of virtual machines to the Azure Virtual
Desktop host pools.
• Minimize network latency of the Azure Virtual Desktop connections from the Boston
and Chennai offices.
• Minimize latency of the Azure Virtual Desktop host authentication in each Azure
region.
• Minimize how long it takes to sign in to the Azure Virtual Desktop session hosts.
• Explicitly allow traffic between the Azure Virtual Desktop session hosts and
Microsoft 365.
• Explicitly allow traffic between the Azure Virtual Desktop session hosts and the
Azure Virtual Desktop infrastructure.
• Use built-in groups for delegation.
• Delegate the management of app groups to Admin2, including the ability to publish
app groups to users and user groups.
• Grant Admin1 permissions to manage workspaces, including listing which apps are
assigned to the app groups.
• Minimize administrative effort to manage network security.
• Use the principle of least privilege.
• Use PowerShell to generate the token used to add the virtual machines as session
hosts to an Azure Virtual Desktop host pool.
• Minimize how long it takes to provision the Azure Virtual Desktop session hosts
based on the custom virtual machine images.
• Whenever possible, preinstall agents and apps in the custom virtual machine
images.
What should you include in the policy configuration? To answer, select the
appropriate options in the answer area.
Correct
Answer:
Question #1Topic 2
Note: This question is part of a series of questions that present the same scenario.
Each question in the series contains a unique solution that might meet the stated
goals. Some question sets might have more than one correct solution, while others
might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a
result, these questions will not appear in the review screen.
You have an Azure Virtual Desktop host pool that contains five session hosts. The
session hosts run Windows 10 Enterprise multi-session.
You need to prevent users from accessing the internet from Azure Virtual Desktop
sessions. The session hosts must be allowed to access all the required
Microsoft services.
Solution: You configure the RDP Properties of the host pool.
Does this meet the goal?
A. Yes
B. No Most Voted
A. \\store1.blob.core.windows.net\profiles
B. https://store1.file.core.windows.net/profiles
C. \\store1.file.core.windows.net\profiles Most Voted
D. https://store1.blob.core.windows.net/profiles
HOTSPOT -
You have a Azure Virtual Desktop host pool that has a max session limit of 15.
Disconnected sessions are signed out immediately.
The session hosts for the host pool are shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each
statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct
Answer:
Reference:
https://docs.microsoft.com/en-us/azure/virtual-desktop/set-up-scaling-script
Question #4Topic 2
HOTSPOT -
You have an Azure virtual machine named VM1 that runs Windows 10 Enterprise
multi-session.
You plan to add language packs to VM1 and create a custom image of VM1 for an
Azure Virtual Desktop host pool.
You need to ensure that modern apps can use the additional language packs when
you deploy session hosts by using the custom image.
Which command should you run first? To answer, select the appropriate options in
the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct
Answer:
Reference:
https://docs.microsoft.com/en-us/azure/virtual-desktop/language-packs
https://docs.microsoft.com/en-us/troubleshoot/windows-server/deployment/issues-
appx-cleanup-maintenance-task
https://docs.microsoft.com/en-us/powershell/module/scheduledtasks/disable-
scheduledtask?view=windowsserver2019-ps
Question #5Topic 2
DRAG DROP -
You have a Azure Virtual Desktop deployment.
You have a session host named Host1 that has the disk layout shown in the exhibit.
(Click the Exhibit tab.)
You plan to deploy an app that must be installed on D. The app requires 500 GB of
disk space.
You need to add a new data disk that will be assigned the drive letter D. The solution
must maintain the current performance of Host1.
Which four actions should you perform in sequence? To answer, move the
appropriate actions from the list of actions to the answer area and arrange them in
the correct order.
Select and Place:
Correct
Answer:
Reference:
https://www.azurecorner.com/change-temporary-drive-azure-vm-use-d-persistent-
data-disks/
Question #6Topic 2
You plan to deploy Azure Virtual Desktop session host virtual machines based on a
preconfigured master image. The master image will be stored in a shared image
gallery.
You create a virtual machine named Image1 to use as the master image. You install
applications and apply configuration changes to Image1.
You need to ensure that the new session host virtual machines created based on
Image1 have unique names and security identifiers.
What should you do on Image1 before you add the image to the shared image
gallery?
You have a shared image gallery that contains the Windows 10 images shown in the
following table.
You create an Azure Virtual Desktop deployment that has the following settings:
✑ Location: West US
✑ Host pool type: Personal
Which images can you use for the session hosts?
HOTSPOT -
You have an Azure subscription that contains the virtual machines shown in the
following table.
You create a shared image gallery as shown in the SharedGallery1 exhibit. (Click the
SharedGallery1 tab.)
You create an image definition as shown in the Image1 exhibit. (Click the Image1
tab.)
For each of the following statements, select Yes if the statement is true. Otherwise,
select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct
Answer:
Reference:
https://www.robinhobo.com/windows-virtual-desktop-wvd-image-management-how-
to-manage-and-deploy-custom-images-including-versioning-with-the-azure- shared-
image-gallery-sig/
Question #9Topic 2
DRAG DROP -
You plan to deploy Azure Virtual Desktop.
You need to create Azure NetApp Files storage to store FSLogix profile containers.
Which four actions should you perform in sequence after you register the NetApp
Resource Provider? To answer, move the appropriate actions from the list of actions
to the answer area and arrange them in the correct order.
NOTE: More than one order of answer choices is correct. You will receive credit for
any of the correct orders you select.
Select and Place:
Correct
Answer:
Reference:
https://docs.microsoft.com/en-us/azure/virtual-desktop/create-fslogix-profile-
container#make-sure-userscan-access-the-azure-netapp-file-share
https://docs.microsoft.com/en-us/azure/azure-netapp-files/azure-netapp-files-
quickstart-set-up-account-create-volumes?tabs=azure-portal
Question #10Topic 2
Note: This question is part of a series of questions that present the same scenario.
Each question in the series contains a unique solution that might meet the stated
goals. Some question sets might have more than one correct solution, while others
might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a
result, these questions will not appear in the review screen.
You have an Azure Virtual Desktop host pool that contains five session hosts. The
session hosts run Windows 10 Enterprise multi-session.
You need to prevent users from accessing the internet from Azure Virtual Desktop
sessions. The session hosts must be allowed to access all the required
Microsoft services.
Solution: You configure rules in the network security group (NSG) linked to the
subnet of the session hosts.
Does this meet the goal?
Note: This question is part of a series of questions that present the same scenario.
Each question in the series contains a unique solution that might meet the stated
goals. Some question sets might have more than one correct solution, while others
might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a
result, these questions will not appear in the review screen.
You have an Azure Virtual Desktop host pool that contains five session hosts. The
session hosts run Windows 10 Enterprise multi-session.
You need to prevent users from accessing the internet from Azure Virtual Desktop
sessions. The session hosts must be allowed to access all the required
Microsoft services.
Solution: You configure the Address space settings of the virtual network that
contains the session hosts.
Does this meet the goal?
A. Yes
B. No Most Voted
Note: This question is part of a series of questions that present the same scenario.
Each question in the series contains a unique solution that might meet the stated
goals. Some question sets might have more than one correct solution, while others
might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a
result, these questions will not appear in the review screen.
You have an Azure Virtual Desktop host pool that contains five session hosts. The
session hosts run Windows 10 Enterprise multi-session.
You need to prevent users from accessing the internet from Azure Virtual Desktop
sessions. The session hosts must be allowed to access all the required
Microsoft services.
Solution: You modify the IP configuration of each session host.
Does this meet the goal?
A. Yes
B. No Most Voted
Question #13Topic 2
You have an Azure Virtual Desktop host pool. The pool contains session hosts that
run Windows 10 Enterprise multi-session.
You connect to a Remote Desktop session on Pool1 and discover an issue with the
frequency of screen updates.
You need to identify whether the issue related to insufficient server, network, or client
resources. The solution must minimize how long it takes to identify the resource
type.
What should you do?
A. From within the current session, use the Azure Virtual Desktop Experience Estimator.
B. From Azure Cloud Shell, run the Get-AzOperationalInsightsWorkspaceUsage cmdlet and
specify the DefaultProfile parameter.
C. From Azure Cloud Shell, run the Get-AzWvdUserSession cmdlet and specify the
UserSessionId parameter.
D. From within the current session, use Performance Monitor to display the values of all the
RemoteFX Graphics(*)\Frames Skipped/Second counters. Most Voted
DRAG DROP -
You have an Azure Virtual Desktop host pool named Pool1.
You need to ensure that you can create an Azure NetApp Files volume that will host
user profiles for Pool1.
Which four actions should you perform in sequence? To answer, move the
appropriate actions from the list of actions to the answer area and arrange them in
the correct order.
NOTE: More than one order of answer choices is correct. You will receive credit for
any of the correct orders you select.
Select and Place:
Correct
Answer:
Reference:
https://docs.microsoft.com/en-us/azure/azure-netapp-files/azure-netapp-files-
quickstart-set-up-account-create-volumes?tabs=azure-portal
Question #15Topic 2
You have an Azure Active Directory (Azure AD) tenant named contoso.com.
You use a user account named Admin1 to deploy an Azure Active Directory Domain
Services (Azure AD DS) managed domain named aaddscontoso.com to a virtual
network named VNET1.
You plan to deploy an Azure Virtual Desktop host pool named Pool1 to VNET1.
You need to ensure that you can use the Admin1 user account to deploy Windows
10 Enterprise session hosts to Pool1.
What should you do first?
You have an Azure Virtual Desktop host pool named Pool1 that contains the
following:
✑ A linked workspace named Workspace1
✑ An application group named Default Desktop
✑ A session host named Host1
You need to add a new data disk.
What should you modify?
Question #17Topic 2
HOTSPOT -
You are automating the deployment of an Azure Virtual Desktop host pool.
You deploy the Azure Resource Manager (ARM) template shown in the following
exhibit.
Use the drop-down menus to select the answer choice that completes each
statement based on the information presented in the ARM template.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct
Answer:
Reference:
https://docs.microsoft.com/en-us/azure/virtual-desktop/virtual-desktop-fall-2019/
configure-host-pool-personal-desktop-assignment-type-2019
https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/scenarios/wvd/
eslz-platform-automation-and-devops
Question #18Topic 2
A. A-series
B. D-series
C. H-series
D. B-series
You have an Azure Active Directory Domain Services (Azure AD DS) domain named
contoso.com.
You have an Azure Storage account named storage1. Storage1 hosts a file share
named share1 that has share and file system permissions configured. Share1 is
configured to use contoso.com for authentication.
You create an Azure Virtual Desktop host pool named Pool1. Pool1 contains two
session hosts that use the Windows 10 multi-session + Microsoft 365 Apps image.
You need to configure an FSLogix profile container for Pool1.
What should you do next?
DRAG DROP -
You have an Azure subscription that contains the storage accounts shown in the
following table.
Correct
Answer:
Reference:
https://docs.microsoft.com/en-us/azure/virtual-desktop/set-up-customize-master-
image#upload-master-image-to-a-storage-account-in-azure
https://docs.microsoft.com/en-us/azure/virtual-desktop/store-fslogix-profile
Question #21Topic 2
You have an Azure storage account that contains the generalized Windows 10 disk
images shown in the following table.
You need to create an image that will be used to deploy an Azure Virtual Desktop
session host.
Which disk should you use?
You need a source virtual hard disk for new Azure Virtual Desktop session host
deployments. The source operating system must have user-specific and machine-
specific information removed.
Which virtual machines can you use as the source?
A. SourceVM3 only
B. SourceVM1 only
C. SourceVM1, SourceVM2, and SourceVM3
D. SourceVM1 and SourceVM2 only
E. SourceVM2 only
Hide Solution Discussion 4
Correct Answer: E 🗳️
Generalizing removes machine specific information so the image can be used to
create multiple VMs. Once the VM has been generalized, you need to let the
platform know so that the boot sequence can be set correctly.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/generalize
Community vote distribution
E (100%)
Question #23Topic 2
HOTSPOT -
You have an Azure Virtual Desktop deployment that contains two users named
User1 and User2 and the storage accounts shown in the following table.
The File share settings for storage1 are configured as shown in the following exhibit.
The File share settings for storage2 are configured as shown in the following exhibit.
For each of the following statements, select Yes if the statement is true. Otherwise,
select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Box 1: Yes -
Storage1: Storage File Data SMB Share Contributor is assigned to User1.
The Share1 on Storage1 is transaction optimized.
Storage File Data SMB Share Contributor, Allows for read, write, and delete access
on files and directories in Azure file shares.
Box 2: Yes -
Storage2 has Share4. User2 is the owner of Storage2.
Box 3: Yes -
Reference:
https://docs.microsoft.com/en-us/azure/storage/files/storage-files-identity-ad-ds-
assign-permissions
Question #25Topic 2
You have an Azure Virtual Desktop host pool named HostPool1. HostPool1 contains
Windows 10 session hosts and the application groups shown in the following table.
HOTSPOT -
You have an Azure subscription named Subscription1 that contains the users shown
in the following table.
Subscription1 contains the Azure Virtual Desktop host pools shown in the following
table.
Subscription1 contains the Azure Virtual Desktop application groups shown in the
following table.
Correct
Answer:
Box 1: Yes -
The P1-0.contoso.com session host is in Pool1.
Group1 has the Desktop Virtualization User Session Operator role for Pool1.
User1 is member of Group1.
Desktop Virtualization User Session Operator
The Desktop Virtualization User Session Operator role allows users to send
messages, disconnect sessions, and use the "logoff" function to sign sessions out of
the session host. However, this role doesn't let users perform session host
management like removing session host, changing drain mode, and so on. This role
can see assignments, but can't modify admins. We recommend you assign this role
to specific host pools. If you give this permission at a resource group level, the admin
will have read permission on all host pools under a resource group.
Box 2: No -
User2 is member of Group2 and Group3. Those do not give access to the P1-
0.contoso.com session host in Pool1.
Box 3: Yes -
User2, as a member of Group3, is a Desktop Virtualization User for AppGroup2.
Pool2 is in AppGroup2. The P2-0.contoso.com session host is in Pool2.
Subnets -
Now select ג€Subnetsג€ and click on the ג€Gateway subnetג€ on the righthand side
of the screen.
Edit the settings, and then click ג€OKג€.
Reference:
https://www.policypak.com/resources/pp-blog/windows-virtual-desktop/
Community vote distribution
C (63%)
A (25%)
13%
Question #28Topic 2
You have an Azure Virtual Desktop deployment that contains a host pool. The pool
has the following settings:
* Resource group: RG1
* Host pool name: Pool1
* Location: East US
* Host pool type: Pooled
The deployment contains the workspaces shown in the following table.
For Pool1, you plan to create a RemoteApp application group named AppGroup1.
In which workspaces can you register AppGroup1?
Question #29Topic 2
HOTSPOT -
You have an Azure Virtual Desktop host pool named HostPool1 that contains 20
session hosts.
You create a new scaling plan that has the Ramp-up settings shown in the following
exhibit.
Use the drop-down menus to select the answer choice that completes each
statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct
Answer:
Box 1: 4 -
20%, minimum percentage of hosts, of 20 session hosts is 4 hosts.
Box 2: evenly across all available session hosts
The load balancing algorithm is breadth-first.
Breadth-first load balancing allows you to evenly distribute user sessions across the
session hosts in a host pool.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-desktop/host-pool-load-balancing
Question #30Topic 2
HOTSPOT -
You have an Azure subscription.
You plan to deploy an Azure Virtual Desktop solution that will contain Windows 10
multi-session hosts in a single host pool. The solution has the requirements shown in
the following table.
You need to configure the session host for the host pool. The solution must minimize
costs.
How many session hosts should the host pool contain, and how many vCPUs should
each session host have? To answer, select the appropriate options in the answer
area.
NOTE: Each correct selection is worth one point.
Hot Area:
Box 2: 4 -
1 VCPU for 4 user, 16 concurrent users per session host. Need 16/4=4 vCPU per
session host.
Note: The following table shows examples of standard or larger user workloads with
20 or more users:
Reference:
https://docs.microsoft.com/en-us/windows-server/remote/remote-desktop-services/
virtual-machine-recs
Question #31Topic 2
You are deploying Storage Spaces Direct to a cluster that will store FSLogix profile
containers. The cluster will NOT use Cloud witness.
What is the minimum number of virtual machines required for the cluster?
A. 1
B. 2
C. 3
D. 4
HOTSPOT
-
You have an Azure Virtual Desktop deployment that contains a host pool named
HostPool1.
Which three settings should you modify? To answer, select the appropriate settings
in the answer area.
Question #33Topic 2
HOTSPOT
-
The subscription uses the Azure Virtual Desktop host pools shown in the following
table.
You need to ensure that User1 can create RemoteApp app groups that will be used
to stream a suite of custom apps from the host pools. The solution must meet the
following requirements:
Which role should you assign to User1, and what is the minimum number of app
groups that User1 should create? To answer, select the appropriate options in the
answer area.
Correct
Answer:
Question #34Topic 2
You have an Azure compute gallery that contains the Windows 10 images shown in
the following table.
You create an Azure Virtual Desktop deployment that has the following settings:
You need to ensure that the users on Host1 can access App1.
You have an Azure Virtual Desktop deployment that contains a host pool named
Pool1. Pool1 contains 10 session hosts that were deployed by using an Azure
Resource Manager (ARM) template.
You discover that Windows licenses were NOT applied to the session hosts.
Correct Answer: A 🗳️
Topic 3
You have an Azure Virtual Desktop host pool named Pool1 and an Azure Storage
account named Storage1. Storage1 stores FSLogix profile containers in a share
folder named share1.
You create a new group named Group1. You provide Group1 with permission to sign
in to Pool1.
You need to ensure that the members of Group1 can store the FSLogix profile
containers in share1. The solution must use the principle of least privilege.
Which two privileges should you assign to Group1? Each correct answer presents
part of the solution.
NOTE: Each correct selection is worth one point.
HOTSPOT -
You have a Azure Virtual Desktop deployment.
You need to ensure that all the connections to the managed resources in the host
pool require multi-factor authentication (MFA).
Which two settings should you modify in a conditional access policy? To answer,
select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
HOTSPOT -
Your company has the offices shown in the following table.
The company has an Azure Active Directory (Azure AD) tenant named contoso.com
that contains a user named User1.
Users connect to a Azure Virtual Desktop deployment named WVD1. WVD1
contains session hosts that have public IP addresses from the 52.166.253.0/24
subnet.
Contoso.com has a conditional access policy that has the following settings:
✑ Name: Policy1
✑ Assignments:
- Users and groups: User1
- Cloud apps or actions: Azure Virtual Desktop
✑ Access controls:
- Grant: Grant access, Require multi-factor authentication
✑ Enable policy: On
For each of the following statements, select Yes if the statement is true. Otherwise,
select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct
Answer:
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-
enable-azure-mfa
Question #5Topic 3
Note: This question is part of a series of questions that present the same scenario.
Each question in the series contains a unique solution that might meet the stated
goals. Some question sets might have more than one correct solution, while others
might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a
result, these questions will not appear in the review screen.
You have an Azure Virtual Desktop host pool named Pool1 that is integrated with an
Azure Active Directory Domain Services (Azure AD DS) managed domain.
You need to configure idle session timeout settings for users that connect to the
session hosts in Pool1.
Solution: From an Azure AD DS-joined computer, you modify the AADDC Users
GPO settings.
Does this meet the goal?
Note: This question is part of a series of questions that present the same scenario.
Each question in the series contains a unique solution that might meet the stated
goals. Some question sets might have more than one correct solution, while others
might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a
result, these questions will not appear in the review screen.
You have an Azure Virtual Desktop host pool named Pool1 that is integrated with an
Azure Active Directory Domain Services (Azure AD DS) managed domain.
You need to configure idle session timeout settings for users that connect to the
session hosts in Pool1.
Solution: From an Azure AD DS-joined computer, you modify the AADDC Computers
GPO settings.
Does this meet the goal?
A. Yes
B. No
Note: This question is part of a series of questions that present the same scenario.
Each question in the series contains a unique solution that might meet the stated
goals. Some question sets might have more than one correct solution, while others
might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a
result, these questions will not appear in the review screen.
You have an Azure Virtual Desktop host pool named Pool1 that is integrated with an
Azure Active Directory Domain Services (Azure AD DS) managed domain.
You need to configure idle session timeout settings for users that connect to the
session hosts in Pool1.
Solution: From the Azure portal, you modify the Session behavior settings in the
RDP Properties of Pool1.
Does this meet the goal?
A. Yes
B. No
Question #9Topic 3
HOTSPOT -
You have an Azure Virtual Desktop Deployment that contains a workspace named
Workspace1 and a user named User1. Workspace1 contains a Desktop application
group named Pool1Desktop.
At 09:00, you create a conditional access policy that has the following settings:
✑ Assignments:
- Users and groups: User1
- Cloud apps or actions: Azure Virtual Desktop
- Conditions: 0 conditions selected
✑ Access controls
- Grant: Grant access, Require multi-factor authentication
- Sessions: Sign-in frequency 1 hour
User1 performs the actions shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise,
select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct
Answer:
Reference:
https://docs.microsoft.com/en-us/azure/virtual-desktop/set-up-mfa
Question #10Topic 3
You deploy an Azure Virtual Desktop session host pool that includes ten virtual
machines.
You need to provide a group of pilot users access to the virtual machines in the pool.
What should you do?
You have an Azure Active Directory Domain Services (Azure AD DS) managed
domain named contoso.com.
You create an Azure Virtual Desktop host pool named Pool1. You assign the Virtual
Machine Contributor role for the Azure subscription to a user named Admin1.
You need to ensure that Admin1 can add session hosts to Pool1. The solution must
use the principle of least privilege.
Which two actions should you perform? Each correct answer presents part of the
solution.
NOTE: Each correct selection is worth one point.
A. Assign Admin1 the Desktop Virtualization Host Pool Contributor role for Pool1 Most Voted
B. Assign Admin1 the Desktop Virtualization Session Host Operator role for Pool1 Most Voted
C. Add Admin1 to the AAD DC Administrators group
D. Assign a Microsoft 365 Enterprise E3 license to Admin1
E. Generate a registration token Most VotedMost Voted
Note: This question is part of a series of questions that present the same scenario.
Each question in the series contains a unique solution that might meet the stated
goals. Some question sets might have more than one correct solution, while others
might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a
result, these questions will not appear in the review screen.
You have an Azure Virtual Desktop host pool named Pool1 that is integrated with an
Azure Active Directory Domain Services (Azure AD DS) managed domain.
You need to configure idle session timeout settings for users that connect to the
session hosts in Pool1.
Solution: From the Azure portal, you modify the Advanced settings in the RDP
Properties of Pool1.
Does this meet the goal?
A. Yes
B. No
Question #13Topic 3
HOTSPOT -
You have two Azure subscriptions that are linked to an Azure Active Directory (Azure
AD) tenant named contoso.com and contain an Azure Virtual Desktop deployment.
The tenant contains a user named User1.
When User1 signs in to Azure Security Center, the user receives the message
shown in the following exhibit.
You need to ensure that User1 can manage security information for the tenant. The
solution must use the principle of least privilege.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct
Answer:
Box 1: Security administrator for contoso.com
Incorrect:
* Not at the subscription level, as there are two subscriptions.
* Not Root management group level
Each directory is given a single top-level management group called the root
management group. The root management group is built into the hierarchy to have
all management groups and subscriptions fold up to it. This root management group
allows for global policies and Azure role assignments to be applied at the directory
level.
Box 2: Privileged Role Administrator
You need to ensure that User1 can manage security information for the tenant.
Privileged Role Administrator - Can manage role assignments in Azure AD, and all
aspects of Privileged Identity Management.
Incorrect:
* External Identity Provider Administrator
This administrator manages federation between Azure AD organizations and
external identity providers. With this role, users can add new identity providers and
configure all available settings (e.g. authentication path, service ID, assigned key
containers). This user can enable the Azure AD organization to trust authentications
from external identity providers.
Reference:
https://docs.microsoft.com/en-us/azure/governance/management-groups/overview
https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference
Question #15Topic 3
DRAG DROP
-
You have an Azure subscription that contains the resources shown in the following
table.
All Azure Virtual Desktop users are members of the AVDusers group.
You need to configure Profiles1 and fabrikam.com to ensure that the HostPool1
sessions hosts can access the FSLogix profile containers.
What should you do? To answer, drag the appropriate configurations to the correct
targets. Each configuration may be used once, more than once, or not at all. You
may need to drag the split bar between panes or scroll to view content.
Question #16Topic 3
You have an Azure Virtual Desktop deployment that contains the resources shown in
the following table.
You create a custom Azure role named Role1 that has sufficient permissions to start
virtual machines on demand.
You need to ensure that the session hosts in Pool1 can start on demand.
A. Managed1
B. Azure Virtual Desktop
C. Azure Automation
D. Host1
E. Azure Compute
Correct Answer: B 🗳️
Question #17Topic 3
You have an Azure Virtual Desktop deployment that contains the resources shown in
the following table.
You need to enable just-in-time (JIT) VM access for all the session hosts.
HOTSPOT
-
You have an Azure Virtual Desktop deployment that contains the resources shown in
the following table.
You need to perform the following configurations:
On which resources should you perform the configurations? To answer, select the
appropriate options in the answer area.
Correct
Answer:
Question #19Topic 3
DRAG DROP
-
You have an Azure Virtual Desktop deployment that contains the resources shown in
the following table.
You have a Windows 11 device named Device1 that has Azure Command-Line
Interface (CLI) installed.
Which three actions should you perform in sequence? To answer, move the
appropriate actions from the list of actions to the answer area and arrange them in
the correct order.
Correct Answer:
Topic 4
- Question Set 4
Question #1Topic 4
A. New-AzADApplication
B. Update-AzWvdApplicationGroup
C. Register-AzWvdApplicationGroup
D. Update-AzWvdApplication
Question #2Topic 4
You have an Azure Virtual Desktop deployment that contains the following:
✑ A host pool named Pool1
✑ Two session hosts named Host1 and Host2
✑ An application group named RemoteAppGroup1 that contains a RemoteApp
named App1
You need to prevent users from copying and pasting between App1 and their local
device.
What should you do?
HOTSPOT -
Your network contains an on-premises Active Directory domain that syncs to an
Azure Active Directory (Azure AD) tenant. The domain contains the users shown in
the following table.
You have an Azure Virtual Desktop deployment that contains the application groups
shown in the following table.
You have the workspaces shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise,
select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct
Answer:
Reference:
https://docs.microsoft.com/en-us/azure/virtual-desktop/environment-setup
Question #4Topic 4
You have an Azure Virtual Desktop host pool that contains two session hosts. The
Microsoft Teams client is installed on each session host.
You discover that only the Microsoft Teams chat and collaboration features work.
The calling and meeting features are disabled.
You need to ensure that users can set the calling and meeting features from within
Microsoft Teams.
What should you do?
You have an Azure Virtual Desktop host pool that contains 20 Windows 10
Enterprise multi-session hosts.
Users connect to the Azure Virtual Desktop deployment from computers that run
Windows 10.
You plan to implement FSLogix Application Masking.
You need to deploy Application Masking rule sets. The solution must minimize
administrative effort.
To where should you copy the rule sets?
Question #6Topic 4
A. msrdcw
B. resetengine
C. mstsc
D. resetpluginhost
Your network contains an on-premises Active Directory domain and an Azure Virtual
Desktop deployment. The computer accounts for all the session hosts are in an
organizational unit (OU) named WVDHostsOU. All user accounts are in an OU
named CorpUsers.
A domain administrator creates a Group Policy Object (GPO) named Policy1 that
only contains user settings. The administrator links Policy1 to WVDHostsOU.
You discover that when users sign in to the session hosts, none of the settings from
Policy1 are applied.
What should you configure to apply GPO settings to the users when they sign in to
the session hosts?
A. loopback processing
B. FSLogix profiles
C. mandatory Roaming User Profiles
D. restricted groups
You network contains an on-premises Active Directory domain. The domain contains
a universal security group named AVDusers.
You have a hybrid Azure Active Directory (Azure AD) tenant. AVDusers syncs to
Azure AD.
You have an Azure Virtual Desktop host pool that contains four Windows 10
Enterprise multi-session hosts.
You need to ensure that only the members of AVDusers can establish Azure Virtual
Desktop sessions to the host pool.
What should you do?
IT Exams
Question 1
You have a Azure Virtual Desktop host pool.
You need to install Microsoft Antimalware for Azure on the session hosts.
What should you do?
Reference:
https://docs.microsoft.com/en-us/azure/security/fundamentals/antimalware
Next Question
Question 2
HOTSPOT -
You have a Azure Virtual Desktop deployment.
You need to ensure that all the connections to the managed resources in the host pool
require multi-factor authentication (MFA).
Which two settings should you modify in a conditional access policy? To answer, select the
appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Answer :
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-
azure-mfa
Next Question
Question 3
HOTSPOT -
Your company has the offices shown in the following table.
The company has an Azure Active Directory (Azure AD) tenant named contoso.com that
contains a user named User1.
Users connect to a Azure Virtual Desktop deployment named WVD1. WVD1 contains session
hosts that have public IP addresses from the 52.166.253.0/24 subnet.
Contoso.com has a conditional access policy that has the following settings:
✑ Name: Policy1
✑ Assignments:
- Users and groups: User1
- Cloud apps or actions: Azure Virtual Desktop
✑ Access controls:
- Grant: Grant access, Require multi-factor authentication
✑ Enable policy: On
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Answer
:
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-
azure-mfa
Next Question
Question 4
Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a
correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result,
these questions will not appear in the review screen.
You have an Azure Virtual Desktop host pool named Pool1 that is integrated with an Azure
Active Directory Domain Services (Azure AD DS) managed domain.
You need to configure idle session timeout settings for users that connect to the session
hosts in Pool1.
Solution: From an Azure AD DS-joined computer, you modify the AADDC Users GPO
settings.
Does this meet the goal?
A. Yes
B. No
Answer : A
Next Question
Question 5
Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a
correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result,
these questions will not appear in the review screen.
You have an Azure Virtual Desktop host pool named Pool1 that is integrated with an Azure
Active Directory Domain Services (Azure AD DS) managed domain.
You need to configure idle session timeout settings for users that connect to the session
hosts in Pool1.
Solution: From an Azure AD DS-joined computer, you modify the AADDC Computers GPO
settings.
Does this meet the goal?
A. Yes
B. No
Answer : A
Next Question
Question 6
Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a
correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result,
these questions will not appear in the review screen.
You have an Azure Virtual Desktop host pool named Pool1 that is integrated with an Azure
Active Directory Domain Services (Azure AD DS) managed domain.
You need to configure idle session timeout settings for users that connect to the session
hosts in Pool1.
Solution: From the Azure portal, you modify the Session behavior settings in the RDP
Properties of Pool1.
Does this meet the goal?
A. Yes
B. No
Answer : B
Next Question
Question 7
You have an Azure Virtual Desktop deployment.
You have a RemoteApp named App1.
You discover that from the Save As dialog box of App1, users can run executable
applications other than App1 on the session hosts.
You need to ensure that the users can run only published applications on the session hosts.
What should you do?
Answer : D
Reference:
https://docs.microsoft.com/en-us/azure/virtual-desktop/security-guide
Next Question
Question 8
HOTSPOT -
You have an Azure Virtual Desktop Deployment that contains a workspace named
Workspace1 and a user named User1. Workspace1 contains a Desktop application group
named Pool1Desktop.
At 09:00, you create a conditional access policy that has the following settings:
✑ Assignments:
- Users and groups: User1
- Cloud apps or actions: Azure Virtual Desktop
- Conditions: 0 conditions selected
✑ Access controls
- Grant: Grant access, Require multi-factor authentication
- Sessions: Sign-in frequency 1 hour
User1 performs the actions shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Answer
:
Reference:
https://docs.microsoft.com/en-us/azure/virtual-desktop/set-up-mfa
Next Question
Question 9
You deploy an Azure Virtual Desktop session host pool that includes ten virtual machines.
You need to provide a group of pilot users access to the virtual machines in the pool.
What should you do?
Answer : D
Reference:
https://docs.microsoft.com/en-us/azure/virtual-desktop/delegated-access-virtual-desktop
Next Question
Question 10
You have an Azure Active Directory Domain Services (Azure AD DS) managed domain named
contoso.com.
You create an Azure Virtual Desktop host pool named Pool1. You assign the Virtual Machine
Contributor role for the Azure subscription to a user named Admin1.
You need to ensure that Admin1 can add session hosts to Pool1. The solution must use the
principle of least privilege.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Assign Admin1 the Desktop Virtualization Host Pool Contributor role for Pool1
B. Assign Admin1 the Desktop Virtualization Session Host Operator role for Pool1
C. Add Admin1 to the AAD DC Administrators group
D. Assign a Microsoft 365 Enterprise E3 license to Admin1
E. Generate a registration token
Answer : BE
Reference:
https://docs.microsoft.com/en-us/azure/virtual-desktop/rbac
Next Question
Question 11
Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a
correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result,
these questions will not appear in the review screen.
You have an Azure Virtual Desktop host pool named Pool1 that is integrated with an Azure
Active Directory Domain Services (Azure AD DS) managed domain.
You need to configure idle session timeout settings for users that connect to the session
hosts in Pool1.
Solution: From the Azure portal, you modify the Advanced settings in the RDP Properties of
Pool1.
Does this meet the goal?
A. Yes
B. No
Answer : B
Next Question
Question 12
You have a hybrid Azure Active Directory (Azure AD) tenant.
You plan to deploy an Azure Virtual Desktop personal host pool. The host pool will contain
15 virtual machines that run Windows 10 Enterprise. The virtual machines will be joined to
the on-premises Active Directory domain and used by the members of a domain group
named Department1.
You need to ensure that each user is added automatically to the local Administrators group
on the virtual machine to which the user signs in.
What should you configure?
Answer : A
Next Question
Question 13
HOTSPOT -
You have two Azure subscriptions that are linked to an Azure Active Directory (Azure AD)
tenant named contoso.com and contain an Azure Virtual Desktop deployment. The tenant
contains a user named User1.
When User1 signs in to Azure Security Center, the user receives the message shown in the
following exhibit.
You need to ensure that User1 can manage security information for the tenant. The solution
must use the principle of least privilege.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Answer
:
Next Question
Question 14
DRAG DROP
-
Your on-premises network contains an Active Directory domain named fabrikam.com that
syncs with Azure Active Directory (Azure AD). The domain contains a global group named
AVDusers.
You have an Azure subscription that contains the resources shown in the following table.
All Azure Virtual Desktop users are members of the AVDusers group.
You need to configure Profiles1 and fabrikam.com to ensure that the HostPool1 sessions
hosts can access the FSLogix profile containers.
What should you do? To answer, drag the appropriate configurations to the correct targets.
Each configuration may be used once, more than once, or not at all. You may need to drag
the split bar between panes or scroll to view content.
Answer :
Next Question
Question 15
You have an Azure Virtual Desktop deployment that contains the resources shown in the
following table.
You create a custom Azure role named Role1 that has sufficient permissions to start virtual
machines on demand.
You need to ensure that the session hosts in Pool1 can start on demand.
A. Managed1
B. Azure Virtual Desktop
C. Azure Automation
D. Host1
E. Azure Compute
Answer : B
Pass4success
Question #1
You have an Azure Virtual Desktop personal host pool named Pool1 that contains 20 Azure
AD-joined session hosts.
You need to ensure that only approved virtual machine extensions are installed on the Pool 1
session hosts. The solution must minimize administrative effort.
B Azure Policy
D Group Policy
Correct Answer: B
Question #2
Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a
correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result,
these questions will not appear in the review screen.
The Azure Virtual Desktop deployment contains personal desktops that are hybrid joined to
the on-premises domain and enrolled in Microsoft Intune.
You need to configure the security settings for the Microsoft Edge browsers on the personal
desktops.
Solution: You configure a Group Policy Object (GPO) in the Azure AD DS managed
domain.
A Yes
B No
Correct Answer: A
https://www.compete366.com/blog-posts/eight-tips-on-how-to-manage-azure-virtual-
desktop-avd/
Question #3
You have an Azure Virtual Desktop personal host pool named Pool1 that contains 20 Azure
AD-joined session hosts.
You need to ensure that only approved virtual machine extensions are installed on the Pool 1
session hosts. The solution must minimize administrative effort.
D Group Policy
Correct Answer: B
Question #4
Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a
correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result,
these questions will not appear in the review screen.
The Azure Virtual Desktop deployment contains personal desktops that are hybrid joined to
the on-premises domain and enrolled in Microsoft Intune.
You need to configure the security settings for the Microsoft Edge browsers on the personal
desktops.
Solution: You configure a Group Policy Object (GPO) in the Azure AD DS managed
domain.
Does this meet the goal?
A Yes
B No
Correct Answer: A
https://www.compete366.com/blog-posts/eight-tips-on-how-to-manage-azure-virtual-
desktop-avd/
Question #5
You have an Azure Virtual Desktop personal host pool named Pool1 that contains 20 Azure
AD-joined session hosts.
You need to ensure that only approved virtual machine extensions are installed on the Pool 1
session hosts. The solution must minimize administrative effort.
B Azure Policy
D Group Policy
Correct Answer: B