AZ-140 Configuring and Operating Microsoft Azure Virtual Desktop Questions and Answers

You have an Azure subscription named Sub1 and a Microsoft 365 E5 subscription.

The tenant contains user accounts for all internal users and users from a partner company named Fabrikam, Inc. Each internal user is assigned a Microsoft 365 E5 license. The users at Fabrikam are not assigned any licenses.

Sub1 has an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains a RemoteApp named Appl.

You need to configure access to App1. The solution must meet the following requirements:

• The Fabrikam users must be licensed by using Per-user access pricing.

• App1 must be accessible to all the internal and Fabrikam users.

• Costs must be minimized.

What should you do first?

You have an A2ure subscription that contains the resources shown in the following table.

You have a virtual machine named Sever 1 that runs Windows Server and is connected to VNet3.

Which two actions should you perform to meet the security requirements for Defender for Endpoint? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

You have a Azure Virtual Desktop deployment that uses Microsoft 355 cloud services including Microsoft Teams.

Users use the Remote Desktop client to connect to the deployment from computers that run Windows 10

You need to support audio and video in Azure Virtual Desktop and provide the users with access to Microsoft Teams calling and meeting features.

Which three actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 has the following settings:

• Host pool type: Pooled

• Load balancing algorithm: Breadth-first

• Max session limit: 5

• Start VM on connect: Yes

Pool1 contains the session hosts shown in the following table.

How many additional users must connect to Pool1 to start Host3?

You have an Azure Virtual Desktop deployment.

You plan to deploy the host pools shown in the following table.

For which host pools can you configure a load-balancing algorithm?

What should you do to meet the application requirements? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an Azure subscription that contains the virtual machines shown in the following table.

You create an Azure Compute Gallery as shown in the Azure compute gallery exhibit. (Click the Azure compute gallery tab.)

You create a virtual machine image definition as shown in the VM image definition exhibit. (Click the VM image definition tab.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

You need to prepare the disk on VM1 for use with the Azure Virtual Desktop deployment. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

You need to recommend an authentication solution that meets the performance requirements.

Which two actions should you include in the recommendation? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Which type of host pool and load balancing algorithm should you configure to meet the performance requirements? To answer, select the appropriate options in The answer area.

NOTE: Each correct selection is worth one point.

What should you configure to meet the networking requirements?

Which monitoring solution should you configure to meet the security requirements?

You need to create a Conditional Access policy to meet the security require-ments.

How should you configure the policy? To answer, select the appropriate options in the answer area.

Which settings should you configure to meet the performance requirements?

What should you do to ensure that the session hosts meet the application requirements for App1?

What should you do to meet the user profile requirements?

Which host pool design and which service should you configure to meet the disaster recovery requirements? To answer, drag the appropriate solution to the correct requirements. Each solution may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content

NOTE: Each correct selection is worth one point.

You need to configure the device redirection settings. The solution must meet the technical requirements.

Where should you configure the settings?

Which three PowerShell modules should you install on Server1 to meet the technical requirements? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

You need to configure the virtual machines that have the Pool1 prefix. The solution must meet the technical requirements.

What should you use?

Which role should you assign to Operator2 to meet the technical requirements?

You are planning the deployment of Pool4.

What will be the maximum number of users that can connect to Pool4, and how many session hosts are needed to support five concurrent user sessions? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You need to evaluate the RDS deployment in the Seattle office. The solution must meet the technical requirements.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Which users can create Pool4, and which users can join session hosts to the domain? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Which setting should you modify for VNET4 before you can deploy Pool4?

You plan to implement the FSLogix profile containers for the Seattle office.

Which storage account should you use?

You have an Azure subscription that contains a hybrid Azure Active Directory (Azure AD) tenant and two domain-joined Azure virtual machines. The virtual machines run Windows Server 2019 and contain managed disks.

You plan to deploy an Azure Virtual Desktop host pool that will use a Storage Spaces Direct Scale-Out File Server to host user profiles.

You need to ensure that the virtual machines can host the Storage Spaces Direct deployment. The solution must meet the following requirements:

• Ensure that the user profiles are available if a single server falls.

• Minimize administrative effort.

What should you do? To answer, select the appropriate options In the answer area. NOTE: Each correct selection is worth one point.

You have an Azure Virtual Desktop deployment

You need to implement FSLogix to host user profiles in an Azure Storage account by using Azure file shares. The solution must meet the following requirements:

• Access to a session host must be allowed only if the user profile is available from the storage account

• Local profiles must NOT be created on the session hosts.

Which FSLogix registry setting should you use?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Virtual Desktop host pool that runs Windows 10 Enterprise multi-session.

User sessions are load-balanced between the session hosts. Idle session timeout is 30 minutes.

You plan to shut down a session host named Host1 to perform routine maintenance.

You need to prevent new user sessions to Host1 without disconnecting active user sessions.

Solution: you change the Drain mode of Host1.

Does this meet the goal?

You have an Azure Virtual Desktop deployment.

You plan to use a Conditional Access policy to enforce multi-factor authentication (MFA) when users connect to the deployment. The solution must meet the following requirements:

• Enforce MFA when a user connects to Azure Virtual Desktop by using a subscription feed.

• Enforce MFA when a user authenticates to a session host that has single sign-on (SSO) enabled.

You need to identify which cloud apps to use for the Conditional Access policy.

Which app should you use for each requirement? To answer, drag the appropriate apps to the correct requirements. Each app may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

You have an Azure subscription.

You plan to deploy an Azure Virtual Desktop solution to the East US Azure region. The solution will contain the resources shown in the following table.

You need to recommend a business continuity solution that meets the following requirements:

* Users must be able to connect to HostPool1 if a datacenter in the East US region fails.

* Costs must be minimized.

What should you include in the recommendation for each resource? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Your network contains an on-premises Active Directory domain named contoso.com that syncs to an Azure Active Directory (Azure AD) tenant You have an Azure Virtual Desktop host pool named Pool1 that has the following settings:

• Host pool name- Pool 1

• Host pool type: Personal

• Number of VMs: 3

The session hosts have the following configurations:

• Image used to create the virtual machines: Windows 10 Enterprise

• Virtual machines domain-Joined to: On-premises conroso.com domain

You need to ensure that you can use Microsoft EndPoint Manager to manage security updates on the session hosts. What should you do?

You have an Azure Virtual Desktop deployment that contains a host pool named Pool1

Pool1 contains two session hosts that are Microsoft Entra joined.

You need to configure single sign-on (SSO) to connect to the session hosts. The solution must enable Microsoft Entra authentication for Remote Desktop Protocol (RDP) in the Microsoft Entra tenant.

Which application requires that you modify the remoteDesktopSecurityConfiguration object?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have the following:

A Microsoft 365 E5 tenant

An on-premises Active Directory domain

A hybrid Azure Active Directory (Azure AD) tenant

An Azure Active Directory Domain Services (Azure AD DS) managed domain

An Azure Virtual Desktop deployment

The Azure Virtual Desktop deployment contains personal desktops that are hybrid joined to the on-premises domain and enrolled in Microsoft Intune.

You need to configure the security settings for the Microsoft Edge browsers on the personal desktops.

Solution: You create and configure a Group Policy Object (GPO) in the on-premises domain.

Does this meet the goal?

You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains the session hosts shown in the following table.

You have two internal users named User1 arndUser2.

You plan to enable the following connectivity for the Azure Virtual Desktop deployment:

• User1 will connect to Host1.

• User2 will connect to Host2.

Which license should you recommend for each user? To answer, drag the appropriate licenses to the correct users. Each license may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

You plan to deploy Windows Virtual Desktop session host virtual machines based on a preconfigured master image. The master image will be stored in a shared image.

You create a virtual machine named Image1 to use as the master image. You install applications and apply configuration changes to Image1.

You need to ensure that the new session host virtual machines created based on Image1 have unique names and security identifiers.

What should you do on Image1 before you add the image to the shared image gallery?

You have an Azure Virtual Desktop deployment that contains two host pools named Pool! and Pool2.

Pool1 contains 10 session hosts and supports 100 concurrent users. Pool2 contains two session hosts and supports 20 concurrent users.

You need to recommend an Azure Virtual Desktop update solution that meets the following requirements:

• All service updates must be tested before reaching general availability.

• Testing must have a minimal impact on the organization.

• No new host pools can be created.

What should you include in the recommendation?

You have an Azure Virtual Desktop deployment that contains two users named User1 and User2 and the storage accounts shown in the following table.

The File share settings for storage1 are configured as shown in the following exhibit.

The File share settings for storage2 are configured as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area: