AZ-140 Configuring and Operating Microsoft Azure Virtual Desktop Questions and Answers

You need to recommend an authentication solution that meets the performance requirements.

Which two actions should you include in the recommendation? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

You need to recommend a DNS infrastructure that meet the performance requirements. What should you recommend? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

You need to deploy the session hosts to meet the deployment requirements Which PowerShell cmdlel should you run first?

You need to ensure the resiliency of the user profiles for the Boston office users. The solution must meet the user performance requirements.

What should you do?

Which two roles should you assign to Admin2 to meet the security requirements? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

You need to configure the user settings of Admin1 to meet the user profile requirements.

What should you do?

You need to ensure that you can implement user profile shares for the Boston office users. The solution must meet the user profile requirements.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

You need to modify the custom virtual machine images to meet the deployment requirements.

What should you install?

You need to configure a conditional access policy to meet the authentication requirements.

What should you include in the policy configuration? To answer, select the appropriate options in the answer area.

NOTE Each correct selection is worth one point.

You have an Azure Virtual Desktop deployment.

You plan to implement FSLogix profiles for the deployment.

You need to configure NTFS permissions for the file share that will store the FSLogix profiles. The solution must follow the principle of least privilege.

At which level should you apply permissions for CREATOR OWNER?

You need to implement network security to meet the security requirements and the performance requirements.

Which two actions should you perform? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

You have an Azure subscription that contains a resource group named RG1. RG1 contains the resources shown in the following table.

Your on-premises network has an IP address range of 192.168.10.0/24. Users on Host1 can successfully connect to the resources on the network.

You add a new on-premises network that has an IP address range of 192.168.11.0/24 and contains a subnet. The subnet contains an application server named App1.

Users report that Host1 cannot connect to App1.

You need to ensure that the users on Host1 can access App1.

What should you modify?

You have an Azure Virtual Desktop deployment.

You have a RemoteApp named App1.

You discover that from the Save As dialog box of App1, users can run executable applications other than App1 on the session hosts.

You need to ensure that the users can run only published applications on the session hosts.

What should you do?

You have an Azure Virtual Desktop deployment that contains two Azure regions.

You plan to implement a disaster recovery solution for user profiles. The solution must meet the following requirements:

• Users must retain their user profiles if a single region fails.

• Administrative effort must be minimized.

What should you include in the recommendation?

You have an Azure subscription that contains a virtual network named VNet1, a storage account named storage1. and five Azure Virtual Desktop session hosts. VNet1 and storage1 ate in the East US Azure region. The session hosts are connected to VNet1.

In storage1. you create an Azure Files share named share1.

You need to ensure that the session hosts connect to share1 by using the Microsoft backbone network.

Solution: You add a service endpoint to VNet1.

Does this meet the goal?

You have the Azure Virtual Desktop deployment shown in the following table.

You plan to deploy a new host pool as shown in the following table.

You need to ensure that you can deploy the host pool.

What should you do?

You have an Azure Virtual Desktop deployment.

You need to secure administrative access to session hosts. The solution must require that administrators use the Azure portal to access the session hosts.

What should you include in the solution?

You have an Azure Virtual Desktop deployment that uses Cloud Cache to store user profiles.

You plan to deploy Microsoft Defender Antivirus exclusions to the session hosts by using the following PowerShell script.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the script.

NOTE: Each correct selection is worth one point.

You have an Azure subscription that contains an Azure Virtual Desktop host pool named Pool1. Pool1 contains a single session host named Host1.

You need to ensure that when an Azure Virtual Desktop session has been inactive for 30 minutes, the user is signed out of the session automatically. The solution must NOT affect other session timeout settings.

What should you do?

You have an Azure subscription.

You need to deploy an Azure Virtual Desktop host pool that will contain 20 Windows 11 session hosts. The solution must meet the following requirements:

• Each session host must have a Windows client license applied.

• Administrative effort must be minimized.

What should you use to deploy the session hosts?

You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains two session hosts.

You build a custom virtual machine named Server? that runs Windows Server.

You need to add Server2 to Pool1.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Virtual Desktop host pool that runs Windows 10 Enterprise multi-session.

User sessions are load-balanced between the session hosts. Idle session timeout is 30 minutes.

You plan to shut down a session host named Host1 to perform routine maintenance.

You need to prevent new user sessions to Host1 without disconnecting active user sessions.

Solution: From the properties of the virtual machine of Host1, you configure the Auto-shutdown settings.

Does this meet the goal?

You have an Azure subscription that contains a hybrid Azure Active Directory (Azure AD) tenant and two domain-joined Azure virtual machines. The virtual machines run Windows Server 2019 and contain managed disks.

You plan to deploy an Azure Virtual Desktop host pool that will use a Storage Spaces Direct Scale-Out File Server to host user profiles.

You need to ensure that the virtual machines can host the Storage Spaces Direct deployment. The solution must meet the following requirements:

• Ensure that the user profiles are available if a single server falls.

• Minimize administrative effort.

What should you do? To answer, select the appropriate options In the answer area. NOTE: Each correct selection is worth one point.

You have an Azure subscription that contains an Azure Virtual Desktop deployment. The subscription contains the virtual networks shown in the following table.

have virtual network peering configured as shown in the following table.

The deployment contains the session hosts shown in the following table.

Windows Defender Firewall is configured on each session host to allow all network traffic between the session hosts For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

You have an Azure Virtual Desktop deployment.

You plan to use FSLogix profile containers.

You need to recommend a solution that will be used to store the containers. The solution must meet the following requirements:

* The containers must be stored on solid-state drives (SSDs)

* Minimize administrative effort

* Minimize cost

the What should you recommend?

You have an Azure Virtual Desktop deployment.

You need to add a new application for a RemoteApp application group. The application must be available only during a user session.

What should you use as an application source?

You have an Azure Virtual Desktop host pool named Pool1 that contains the following:

A linked workspace named Workspace1

An application group named Default Desktop

A session host named Host1

You need to add a new data disk.

What should you modify?

You have an Azure Virtual Desktop deployment that contains a host pool. The host pool contains 10 session hosts. The session hosts are configured by using a custom image and ephemeral disks.

You need to deploy Microsoft OneDrive for Business.

Which two actions should you perform for each session host? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

You have an Azure Virtual Desktop deployment that contains a host pool.

The host pool contains 100 session hosts that run Windows 10 on general-purpose virtual machines.

You plan to implement Quality of Service (QoS) for the deployment.

What should you do first?

You have an Azure subscription named Subscription that contains an Azure Virtual Desktop host pool named HostPool1.

HostPool1 is managed by using Microsoft Intune. Subscription1 contains 50 users that connect to HostPool1 by using computers that run Windows 10.

You need to prevent the users from copying files between an Azure Virtual Desktop session and the computers. The solution must minimize administrative effort.

What should you do?

You have an Azure subscription that contains the resources shown in the following table.

You have a virtual machine named Server1 that runs Windows Server and is connected to VNet3.

You need to deploy the Azure Virtual Desktop host pools shown in the following table.

The solution must meet the following requirements:

• The session hosts in Pool1 must access Server1 via the Microsoft backbone network.

• The session hosts in Pool2 must access storage1 via the Microsoft backbone network.

What should you configure on the virtual networks? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an Azure Virtual Desktop deployment.

You need to recommend a solution to run containerized applications without installing the applications on the session hosts.

What should you include in the recommendation?

Note: This question is part of a series of questions that present the same scenario. Each question in

the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these

questions will not appear in the review screen.

You have a Windows Virtual Desktop host pool that contains five session hosts. The session hosts run Windows 10 Enterprise multi-session.

You need to prevent users from accessing the internet from Windows Virtual Desktop sessions. The session hosts must be allowed to access all the required Microsoft services.

Solution: You configure rules in the network security group (NSG) linked to the subnet of the session hosts.

Does that meet the goal?

Which monitoring solution should you configure to meet the security requirements?

What should you configure to meet the networking requirements?

What should you do to meet the application requirements? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

What should you do to meet the user profile requirements?

What should you do to ensure that the session hosts meet the application requirements for App1?

You need to create a Conditional Access policy to meet the security require-ments.

How should you configure the policy? To answer, select the appropriate options in the answer area.

Which settings should you configure to meet the performance requirements?

Which type of host pool and load balancing algorithm should you configure to meet the performance requirements? To answer, select the appropriate options in The answer area.

NOTE: Each correct selection is worth one point.

You need to configure the device redirection settings. The solution must meet the technical requirements.

Where should you configure the settings?

Which three PowerShell modules should you install on Server1 to meet the technical requirements? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.