AZ-140: Configuring and Operating Windows Virtual Desktop on Microsoft Azure Part 1
Question #: 5
Topic #: 2
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Virtual Desktop host pool that contains five session hosts. The session hosts run Windows 10 Enterprise multi-session.
You need to prevent users from accessing the internet from Azure Virtual Desktop sessions. The session hosts must be allowed to access all the required
Microsoft services.
Solution: You configure the RDP Properties of the host pool.
Does this meet the goal?
A. Yes
B. No
Selected Answer: B
Question #: 6
Topic #: 15
You need to configure the virtual machines that have the Pool1 prefix. The solution must meet the technical requirements.
What should you use?
A. an Azure Virtual Desktop automation task
B. Virtual machine auto-shutdown
C. Service Health in Azure Monitor
D. Azure Automation
Selected Answer: D
Question #: 7
Topic #: 3
You have an Azure Virtual Desktop host pool named Pool1 and an Azure Storage account named Storage1. Storage1 stores FSLogix profile containers in a share folder named share1.
You create a new group named Group1. You provide Group1 with permission to sign in to Pool1.
You need to ensure that the members of Group1 can store the FSLogix profile containers in share1. The solution must use the principle of least privilege.
Which two privileges should you assign to Group1? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. the Storage Blob Data Contributor role for storage1
B. the List folder / read data NTFS permissions for share1
C. the Modify NTFS permissions for share1
D. the Storage File Data SMB Share Reader role for storage1
E. the Storage File Data SMB Share Elevated Contributor role for storage1
F. the Storage File Data SMB Share Contributor role for storage1
Selected Answer: CF
Question #: 8
Topic #: 11
Which role should you assign to Operator2 to meet the technical requirements?
A. Desktop Virtualization Session Host Operator
B. Desktop Virtualization Host Pool Contributor
C. Desktop Virtualization User Session Operator
D. Desktop Virtualization Contributor
Selected Answer: B
Question #: 9
Topic #: 6
You have an Azure Virtual Desktop deployment that uses Azure Active Directory Domain Services (Azure AD DS).
You have the following host pool:
• Name: Pool1
• Type: Personal
• Number of session hosts: 5
You plan to deploy two new session hosts to Pool1.
What should you do before you deploy the session hosts?
A. Create a scaling plan.
B. Precreate a computer account in Azure AD DS.
C. Increase the maximum session limit.
D. Create a registration key.
Selected Answer: D
Question #: 10
Topic #: 5
You have an Azure Virtual Desktop host pool that runs Windows 10 Enterprise multi-session.
You need to configure automatic scaling of the host pool to meet the following requirements:
✑ Distribute new user sessions across all running session hosts.
✑ Automatically start a new session host when concurrent user sessions exceed 30 users per host.
What should you include in the solution?
A. an Azure Automation account and the depth-first load balancing algorithm
B. an Azure Automation account and the breadth-first load balancing algorithm
C. an Azure load balancer and the breadth-first load balancing algorithm
D. an Azure load balancer and the depth-first load balancing algorithm
Selected Answer: B
Question #: 11
Topic #: 4
You have an Azure Virtual Desktop deployment.
You publish a RemoteApp named AppVersion1.
You need AppVersion1 to appear in the Remote Desktop client as Sales Contact Application.
Which PowerShell cmdlet should you use?
A. New-AzADApplication
B. Update-AzWvdApplicationGroup
C. Register-AzWvdApplicationGroup
D. Update-AzWvdApplication
Selected Answer: D
Question #: 12
Topic #: 12
You need to recommend an authentication solution that meets the performance requirements.
Which two actions should you include in the recommendation? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Join all the session hosts to Azure AD.
B. In each Azure region that will contain the Azure Virtual Desktop session hosts, create an Azure Active Directory Domain Service (Azure AD DS) managed domain.
C. Deploy domain controllers for the on-premises Active Directory domain on Azure virtual machines to the new sites..
D. Deploy read-only domain controllers (RODCs) on Azure virtual machines to the new sites.
E. In each Azure region that will contain the Azure Virtual Desktop session hosts, create an Active Directory site.
Selected Answer: CE
Question #: 13
Topic #: 13
You need to configure the device redirection settings. The solution must meet the technical requirements.
Where should you configure the settings?
A. Workspace1
B. MontrealUsers
C. Group1
D. Pool1
Selected Answer: D
Question #: 14
Topic #: 14
You need to configure the user settings of Admin1 to meet the user profile requirements.
What should you do?
A. Modify the membership of the FSLogix ODFC Exclude List group.
B. Modify the membership of the FSLogix Profile Exclude List group.
C. Modify the HKLM\SOFTWARE\FSLogix\Profiles registry settings.
D. Modify the HKLM\SOFTWARE\FSLogix\ODFC registry settings.
Selected Answer: B
Question #: 15
Topic #: 10
You need to implement network security to meet the security requirements and the performance requirements.
Which two actions should you perform? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. Deploy two Azure Firewall instances and Azure Firewall Manager.
B. Filter traffic by using outbound rules.
C. Filter traffic by using infrastructure rules.
D. Filter traffic by using inbound rules.
E. Deploy a network security group (NSG) and two application security groups.
F. Deploy an Azure Firewall instance and Azure Firewall Manager.
Selected Answer: AE
Question #: 16
Topic #: 16
You need to recommend an authentication solution that meets the performance requirements.
Which two actions should you include in the recommendation? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Configure identity for all the session hosts.
B. In each Azure region that will contain the Azure Virtual Desktop session hosts, create an Azure Active Directory Domain Service (Azure AD DS) managed domain.
C. Deploy domain controllers for the on-premises Active Directory domain on Azure virtual machines to the new sites.
D. Deploy read-only domain controllers (RODCs) on Azure virtual machines to the new sites.
E. In each Azure region that will contain the Azure Virtual Desktop session hosts, create an Active Directory site.
Selected Answer: CE
Question #: 21
Topic #: 1
You have an Azure Active Directory (Azure AD) tenant named contoso.com and an Azure virtual network named VNET1.
To VNET1, you deploy an Azure Active Directory Domain Services (Azure AD DS) managed domain named litwareinc.com.
To VNET1, you plan to deploy a Azure Virtual Desktop host pool named Pool1.
You need to ensure that you can deploy Windows 10 Enterprise session hosts to Pool1.
What should you do first?
A. Modify the settings of the litwareinc.com DNS zone.
B. Modify the DNS settings of VNET1.
C. Add a custom domain name to contoso.com.
D. Implement Azure AD Connect cloud sync.
Selected Answer: B
Question #: 22
Topic #: 14
You need to ensure the resiliency of the user profiles for the Boston office users. The solution must meet the user performance requirements.
What should you do?
A. Modify the Account kind setting of storage1.
B. Modify the replication settings of storage1.
C. Implement Azure Site Recovery.
D. Configure Cloud Cache.
Selected Answer: B
Question #: 23
Topic #: 9
You plan to implement the FSLogix profile containers for the Seattle office.
Which storage account should you use?
A. storage2
B. storage4
C. storage3
D. storage1
Selected Answer: D
Question #: 24
Topic #: 4
You have an Azure Virtual Desktop deployment that contains the following:
✑ A host pool named Pool1
✑ Two session hosts named Host1 and Host2
✑ An application group named RemoteAppGroup1 that contains a RemoteApp named App1
You need to prevent users from copying and pasting between App1 and their local device.
What should you do?
A. Create an AppLocker policy.
B. Modify the locks of RemoteAppGroup1.
C. Assign the Desktop Virtualization Reader role for Pool1 to the users.
D. Modify the RDP Properties of Pool1.
Selected Answer: D
Question #: 25
Topic #: 13
Which three PowerShell modules should you install on Server1 to meet the technical requirements? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Pester
B. RemoteDesktop
C. ServerManager
D. ActiveDirectory
E. Hyper-V
Selected Answer: ADE
Question #: 26
Topic #: 2
You deploy an Azure Virtual Desktop host pool named Pool1.
You have an Azure Storage account named store1 that stores FSLogix profile containers in a share named profiles.
You need to configure the path to the storage containers for the session hosts.
Which path should you use?
A. \\store1.blob.core.windows.net\profiles
B. https://store1.file.core.windows.net/profiles
C. \\store1.file.core.windows.net\profiles
D. https://store1.blob.core.windows.net/profiles
Selected Answer: C
Question #: 27
Topic #: 10
You need to modify the custom virtual machine images to meet the deployment requirements.
What should you install?
A. the RSAT: Remote Desktop Services Tools optional feature
B. the Azure Virtual Desktop Agent
C. the Microsoft Monitoring Agent
D. the FSLogix agent
Selected Answer: D
Question #: 28
Topic #: 3
You have a Azure Virtual Desktop host pool.
You need to install Microsoft Antimalware for Azure on the session hosts.
What should you do?
A. Add an extension to each session host.
B. From a Group Policy Object (GPO), enable Windows 10 security features.
C. Configure the RDP Properties of the host pool.
D. Sign in to each session host and install a Windows feature.
Selected Answer: A
Question #: 33
Topic #: 12
Which two roles should you assign to Admin1 to meet the security requirements? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Desktop Virtualization Host Pool Contributor
B. Desktop Virtualization Application Group Contributor
C. Desktop Virtualization Workspace Contributor
D. Desktop Virtualization Application Group Reader
E. User Access Administrator
Selected Answer: CD
Question #: 34
Topic #: 5
You have an Azure Virtual Desktop host pool named Pool1 and an Azure Automation account named Account1. Pool1 is integrated with an Azure Active Directory
Domain Services (Azure AD DS) managed domain named contoso.com.
You plan to configure scaling for Pool1 by using Azure Automation runbooks.
You need to authorize the runbooks to manage the scaling of Pool1. The solution must minimize administrative effort.
What should you configure?
A. a managed identity in Azure Active Directory (Azure AD)
B. a group Managed Service Account (gMSA) in Azure AD DS
C. a Connections shared resource in Azure Automation
D. a Run As account in Azure Automation
Selected Answer: A
Question #: 35
Topic #: 9
Which setting should you modify for VNET4 before you can deploy Pool4?
A. Service endpoints
B. Address space
C. DNS servers
D. Access control (IAM)
E. Peerings
Selected Answer: C
Question #: 36
Topic #: 10
You need to deploy the session hosts to meet the deployment requirements.
Which PowerShell cmdlet should you run first?
A. Update-AzWvdSessionHost
B. Get-AzApiManagementSsoToken
C. Set-AzVMADDomainExtension
D. New-AzWvdRegistrationInfo
Selected Answer: D
Question #: 37
Topic #: 1
You have the devices shown in the following table.
You plan to deploy Azure Virtual Desktop for client access to remove virtualized apps.
Which devices support the Remote Desktop client?
A. Device1 and Device2 only
B. Device1 and Device3 only
C. Device1, Device2, and Device3
D. Device1 only
Selected Answer: B
Question #: 43
Topic #: 4
You have an Azure Virtual Desktop host pool that contains two session hosts. The Microsoft Teams client is installed on each session host.
You discover that only the Microsoft Teams chat and collaboration features work. The calling and meeting features are disabled.
You need to ensure that users can set the calling and meeting features from within Microsoft Teams.
What should you do?
A. Install the Remote Desktop WebRTC Redirector Service.
B. Configure Remote audio mode in the RDP Properties.
C. Install the Teams Meeting add-in for Outlook.
D. Configure audio input redirection.
Selected Answer: B
Question #: 44
Topic #: 5
You have an Azure Virtual Desktop host pool named Pool1 that runs Windows 10 Enterprise multi-session hosts.
You need to use Performance Monitor to troubleshoot a low frame quality issue that is affecting a current use session to Pool1.
What should you run to retrieve the user session ID?
A. Get-ComputerInfo
B. qwinsta
C. whoami
D. Get-LocalUser
Selected Answer: B
Question #: 48
Topic #: 4
You have an Azure Virtual Desktop host pool that contains 20 Windows 10 Enterprise multi-session hosts.
Users connect to the Azure Virtual Desktop deployment from computers that run Windows 10.
You plan to implement FSLogix Application Masking.
You need to deploy Application Masking rule sets. The solution must minimize administrative effort.
To where should you copy the rule sets?
A. the FSLogix profile container of each user
B. C:\Program Files\FSLogix\Apps\Rules on every Windows 10 computer
C. C:\Program Files\FSLogix\Apps\Rules on every session host
Selected Answer: C
Question #: 49
Topic #: 12
Which two roles should you assign to Admin2 to meet the security requirements? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Desktop Virtualization Host Pool Contributor
B. Desktop Virtualization Application Group Contributor
C. Desktop Virtualization Workspace Contributor
D. Desktop Virtualization Application Group Reader
E. User Access Administrator
Selected Answer: BE
Question #: 50
Topic #: 5
You have an Azure subscription that contains the resources shown in the following table.
Which resources can you back up by using Azure Backup?
A. WVDVM-0 and share1 only
B. WVDVM-0 only
C. WVDVM-0, Image1, and Image2 only
D. WVDVM-0, share1, and Image1 only
E. WVDVM-0, share1, Image1, and Image2
Selected Answer: A
Question #: 51
Topic #: 3
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Virtual Desktop host pool named Pool1 that is integrated with an Azure Active Directory Domain Services (Azure AD DS) managed domain.
You need to configure idle session timeout settings for users that connect to the session hosts in Pool1.
Solution: From an Azure AD DS-joined computer, you modify the AADDC Users GPO settings.
Does this meet the goal?
A. Yes
B. No
Selected Answer: B
Question #: 53
Topic #: 1
You plan to deploy Azure Virtual Desktop to meet the department requirements shown in the following table.
You plan to use Azure Virtual Desktop host pools with load balancing and autoscaling.
You need to recommend a host pool design that meets the requirements. The solution must minimize costs.
What is the minimum number of host pools you should recommend?
A. 1
B. 2
C. 3
D. 4
Selected Answer: C
Question #: 54
Topic #: 6
You have an Azure Virtual Desktop deployment that contains a host pool named Pool1.
Pool1 contains a session host named Host1 that is Azure AD-joined.
You need to verify whether a Windows license is assigned to Host1.
What should you do?
A. From the Azure Active Directory admin center, view the product licenses.
B. From VM1, run the Get-WindowsDeveloperLicense cmdlet.
C. From the Azure portal, view the properties of Host1.
D. From Azure Cloud Shell, run the Get-AzVm cmdlet.
Selected Answer: C
Question #: 55
Topic #: 4
You have an Azure Virtual Desktop host pool named Pool1.
You are troubleshooting an issue for a Remote Desktop client that stopped responding.
You need to restore the default Remote Desktop client settings and unsubscribe from all workspaces.
Which command should you run?
A. msrdcw
B. resetengine
C. mstsc
D. resetpluginhost
Selected Answer: A
Question #: 56
Topic #: 3
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Virtual Desktop host pool named Pool1 that is integrated with an Azure Active Directory Domain Services (Azure AD DS) managed domain.
You need to configure idle session timeout settings for users that connect to the session hosts in Pool1.
Solution: From an Azure AD DS-joined computer, you modify the AADDC Computers GPO settings.
Does this meet the goal?
A. Yes
B. No
Selected Answer: A
Question #: 57
Topic #: 2
You plan to deploy Azure Virtual Desktop session host virtual machines based on a preconfigured master image. The master image will be stored in a shared image gallery.
You create a virtual machine named Image1 to use as the master image. You install applications and apply configuration changes to Image1.
You need to ensure that the new session host virtual machines created based on Image1 have unique names and security identifiers.
What should you do on Image1 before you add the image to the shared image gallery?
A. At a command prompt, run the set computername command.
B. At a command prompt, run the sysprep command.
C. From PowerShell, run the rename-computer cmdlet.
D. From the lock screen of the Windows device, perform a Windows Autopilot Reset.
Selected Answer: B
Question #: 58
Topic #: 2
You have a shared image gallery that contains the Windows 10 images shown in the following table.
You create an Azure Virtual Desktop deployment that has the following settings:
Host pool name: Pool1 –
✑ Location: West US
✑ Host pool type: Personal
Which images can you use for the session hosts?
A. Image1 only
B. Image1, Image2, Image3, and Image4
C. Image2 only
D. Image1 and Image2 only
E. Image1 and Image3 only
Selected Answer: E
Question #: 59
Topic #: 1
Your company has a main office and two branch offices. Each office connects directly to the internet. The router in each branch office is configured as an endpoint for the following VPNs:
✑ A VPN connection to the main office
✑ A site-to-site VPN to Azure
The routers in each branch office have the Quality of Service (QoS) rules shown in the following table.
Users in the branch office report slow responses and connection errors when they attempt to connect to Azure Virtual Desktop resources.
You need to modify the QoS rules on the branch office routers to improve Azure Virtual Desktop performance.
For which rule should you increase the bandwidth allocation?
A. Rule2
B. Rule3
C. Rule4
D. Rule1
Selected Answer: B
Question #: 60
Topic #: 6
You have an Azure subscription that contains an Azure Compute Gallery named Gallery1 and a virtual machine named Template1. Template1 has custom apps and settings configured.
You plan to deploy Azure Virtual Desktop session hosts by using a custom virtual machine image. The solution must meet the following requirements:
• The custom image must be stored in Gallery1.
• The custom image must be based on Template1.
• All new session hosts must have unique computer names and identifiers.
You need to create the custom image.
What should you do in the Azure portal?
A. From Gallery1, create a new VM application definition.
B. From Gallery1, create a new VM image definition.
C. From Template1, capture a generalized virtual machine image.
D. From Template1, capture a specialized virtual machine image.
Selected Answer: C
Question #: 61
Topic #: 5
You have an Azure Virtual Desktop deployment.
You deploy and configure Azure Virtual Desktop in a secondary location.
You plan to perform a test failover to the secondary location, but discover existing user sessions to the primary location.
You need to sign out users from the session hosts in the primary location.
Which PowerShell cmdlet should you run?
A. Invoke-RdsUserSessionLogoff
B. Remove-AzWvdUserSession
C. Invoke-RestMethod
D. Remove-Alias
Selected Answer: A
Question #: 62
Topic #: 4
Your network contains an on-premises Active Directory domain and an Azure Virtual Desktop deployment. The computer accounts for all the session hosts are in an organizational unit (OU) named WVDHostsOU. All user accounts are in an OU named CorpUsers.
A domain administrator creates a Group Policy Object (GPO) named Policy1 that only contains user settings. The administrator links Policy1 to WVDHostsOU.
You discover that when users sign in to the session hosts, none of the settings from Policy1 are applied.
What should you configure to apply GPO settings to the users when they sign in to the session hosts?
A. loopback processing
B. FSLogix profiles
C. mandatory Roaming User Profiles
D. restricted groups
Selected Answer: A
Question #: 63
Topic #: 3
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Virtual Desktop host pool named Pool1 that is integrated with an Azure Active Directory Domain Services (Azure AD DS) managed domain.
You need to configure idle session timeout settings for users that connect to the session hosts in Pool1.
Solution: From the Azure portal, you modify the Session behavior settings in the RDP Properties of Pool1.
Does this meet the goal?
A. Yes
B. No
Selected Answer: B
Question #: 65
Topic #: 1
You plan to deploy Azure Virtual Desktop. The deployment will use existing virtual machines.
You create a Azure Virtual Desktop host pool.
You need to ensure that you can add the virtual machines to the host pool.
What should you do first?
A. Register the Microsoft.DesktopVirtualization provider.
B. Generate a registration key.
C. Run the Invoke-AzVMRunCommand cmdlet.
D. Create a role assignment.
Selected Answer: B
Question #: 66
Topic #: 6
You have a Microsoft Entra tenant named contoso.com and an Azure Virtual Desktop deployment.
You have a RemoteApp app group named RemoteApp1.
You have a partner company named Fabrikam, Inc. that has 200 users. The users require access to RemoteApp1.
You need to identify which type of pricing is associated with providing RemoteApp1 access to the Fabrikam users.
What should you identify?
A. compute only
B. compute, storage, and networking only
C. Azure Virtual Desktop per-user access and compute only
D. Azure Virtual Desktop per-user access only
E. Azure Virtual Desktop per-user access, compute, storage, and networking
Selected Answer: E
Question #: 67
Topic #: 4
You have an Azure Virtual Desktop deployment.
You need to provide external users with access to the deployment. The external users have computers that run Windows 10 Pro and Windows 10 Enterprise. The users do not have the ability to install applications.
What should you recommend that the users use to connect to the deployment?
A. Microsoft Edge
B. RemoteApp and Desktop Connection
C. Remote Desktop Manager
D. Remote Desktop Connection
Selected Answer: A
Question #: 68
Topic #: 5
You have an Azure Virtual Desktop deployment.
You use the Start/Stop VMs during off-hours feature in Azure.
You need to configure which virtual machines must never be stopped by the solution.
What should you configure?
A. the Diagnostic settings of the host pool
B. the Start-Stop-VM task
C. an Azure Automation account variable
D. an action group
Selected Answer: C
Question #: 69
Topic #: 3
You have an Azure Virtual Desktop deployment.
You have a RemoteApp named App1.
You discover that from the Save As dialog box of App1, users can run executable applications other than App1 on the session hosts.
You need to ensure that the users can run only published applications on the session hosts.
What should you do?
A. Configure a conditional access policy in Azure Active Directory (Azure AD).
B. Modify the Access control (IAM) settings of the host pool.
C. Modify the RDP Properties of the host pool.
D. Configure an AppLocker policy on the session hosts.
Selected Answer: D
Question #: 73
Topic #: 1
You are designing an Azure Virtual Desktop deployment.
You identify the network latency between the locations where users reside and the planned deployment.
What should you use to identify the best Azure region to deploy the host pool?
A. Azure Traffic Manager
B. Azure Virtual Desktop Experience Estimator
C. Azure Monitor for Azure Virtual Desktop
D. Azure Advisor
Selected Answer: B
Question #: 74
Topic #: 5
You have an Azure Virtual Desktop host pool in the US East Azure region.
You need to ensure that the host pool can fail over to the US West Azure region.
What should you do first?
A. Create a Recovery Services vault.
B. Create a virtual machine snapshot of each session host.
C. Create an Azure Storage account that uses geo-redundant storage (GRS).
D. Create a new host pool.
Selected Answer: A
Question #: 75
Topic #: 4
You network contains an on-premises Active Directory domain. The domain contains a universal security group named AVDusers.
You have a hybrid Azure Active Directory (Azure AD) tenant. AVDusers syncs to Azure AD.
You have an Azure Virtual Desktop host pool that contains four Windows 10 Enterprise multi-session hosts.
You need to ensure that only the members of AVDusers can establish Azure Virtual Desktop sessions to the host pool.
What should you do?
A. Assign AVDusers to an Azure role scoped to each host pool.
B. On each session host, add AVDusers to the local Remote Desktop Users group.
C. Assign AVDusers to an Azure role scoped to the session hosts.
D. Assign AVDusers to an application group.
Selected Answer: D
Question #: 76
Topic #: 6
You have an Azure Virtual Desktop deployment that contains a pooled host pool named Pool1. Pool1 contains five session hosts.
You plan to deploy two apps named App1 and App2. The solution must meet the following requirements:
• All the session hosts must contain both apps.
• All users must connect to a full desktop session.
• Only users in the sales department must be able to use App1.
• Only users in the research department must be able to use App2.
You need to ensure that the users in each department can see only their assigned app when they connect to Pool1.
What should you use?
A. FSLogix application masking
B. MSIX app attach
C. RemoteApp application groups
D. RemoteApp streaming
Selected Answer: A
Question #: 77
Topic #: 5
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Virtual Desktop host pool that runs Windows 10 Enterprise multi-session.
User sessions are load-balanced between the session hosts. Idle session timeout is 30 minutes.
You plan to shut down a session host named Host1 to perform routine maintenance.
You need to prevent new user sessions to Host1 without disconnecting active user sessions.
Solution: From the host pool, you change the Drain mode of Host1.
Does this meet the goal?
A. Yes
B. No
Selected Answer: A
Question #: 78
Topic #: 4
You deploy multiple Azure Virtual Desktop session hosts that have only private IP addresses.
You need to ensure that administrators can initiate an RDP session to the session hosts by using the Azure portal.
What should you implement?
A. Remote Desktop Connection Broker (RD Connection Broker)
B. Azure Application Gateway
C. Azure Bastion
D. Remote Desktop Session Host (RD Session Host)
Selected Answer: C
Question #: 79
Topic #: 2
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Virtual Desktop host pool that contains five session hosts. The session hosts run Windows 10 Enterprise multi-session.
You need to prevent users from accessing the internet from Azure Virtual Desktop sessions. The session hosts must be allowed to access all the required
Microsoft services.
Solution: You configure rules in the network security group (NSG) linked to the subnet of the session hosts.
Does this meet the goal?
A. Yes
B. No
Selected Answer: A
Question #: 80
Topic #: 3
You deploy an Azure Virtual Desktop session host pool that includes ten virtual machines.
You need to provide a group of pilot users access to the virtual machines in the pool.
What should you do?
A. Create a role definition.
B. Add the users to a Remote Desktop Users group on the virtual machines.
C. Add the users to the local Administrators group on the virtual machines.
D. Create a role assignment.
Selected Answer: D
Question #: 81
Topic #: 1
You have an Azure Virtual Desktop host pool named Pool1 in the East US region.
You have a storage account named storage1 that contains FSLogix profile containers. In the East US region, you have a shared image gallery named SIG1 that contains a virtual machine image named Image1. Image1 is used to create new session hosts in Pool1.
You plan to deploy a new Azure Virtual Desktop host pool named Pool2 to the South India region.
You need to implement a session host deployment solution for Pool2 that meets the following requirements:
✑ Image1 must replicate in the South India region.
✑ The session hosts in Pool2 must be based on Image1.
✑ Changes to Image1 must be available in the South India and East US regions.
What should you include in the solution?
A. Create a new shared image gallery named SIG2 in the South India region. Upload a copy of Image1 to SIG2.
B. Create a new Azure Storage account named storage2 in the South India region. Copy Image1 to a shared folder in storage2.
C. From SIG1, update the replication for the latest image version of Image1.
D. Configure geo-redundant storage (GRS) replication for storage1. Copy the VHD file of Image1 to the FSLogix profile container.
Selected Answer: C
