Microsoft AZ-140 ACTUAL EXAM QUESTIONS
183 Total Questions
$45 3 Months Free Updates
$65 3 Months Free Updates
183 Total Questions
$55 3 Months Free Updates
Experience the quality of our Microsoft Configuring and Operating Windows Virtual Desktop on Microsoft Azure AZ-140 exam with free practice questions and answers. At Pass4Exams, we take pride in being a trusted source for Microsoft AZ-140 exam preparation. Download our reliable and up-to-date AZ-140 dumps today and prepare to pass your exam with complete confidence backed by our money-back guarantee.
Question # 1
You have a Windows Virtual Desktop host pool named Pool1 that runs Windows 10 Enterprise multisession hosts. You need to use Performance Monitor to troubleshoot a low frame quality issue that is affecting a current use session to Pool1. What should you run to retrieve the user session ID?
A. Get-ComputerInfo
B. qwinsta
C. whoami
D. Get-LocalUser
Question # 2
You have a Windows Virtual Desktop host pool named Pool1 and an Azure Automation account named account1. Pool1 is integrated with an Azure Active Directory Domain Services (Azure AD DS) managed domain named contoso.com. You plan to configure scaling for Pool1 by using Azure Automation runbooks. You need to authorize the runbooks to manage the scaling of Pool1. The solution must minimize administrative effort. What should you configure?
A. a managed identity in Azure Active Directory (Azure AD)
B. a group Managed Service Account (gMSA) in Azure AD DS
C. a Connections shared resource in Azure Automation
D. a Run As account in Azure Automation
Question # 3
You have a Windows Virtual Desktop host pool that runs Windows 10 Enterprise multi-session. You need to configure automatic scaling of the host pool to meet the following requirements: Distribute new user sessions across all running session hosts. Automatically start a new session host when concurrent user sessions exceed 30 users per host. What should you include in the solution?
A. an Azure Automation account and the depth-first load balancing algorithm
B. an Azure Automation account and the breadth-first load balancing algorithm
C. an Azure load balancer and the breadth-first load balancing algorithm
D. an Azure load balancer and the depth-first load balancing algorithm
Question # 4
You deploy multiple Windows Virtual Desktop session hosts that have only private IP addresses. You need to ensure that administrators can initiate an RDP session to the session hosts by using the Azure portal. What should you implement?
A. Remote Desktop Connection Broker (RD Connection Broker)
B. Azure Application Gateway
C. Azure Bastion
D. Remote Desktop Session Host (RD Session Host)
Question # 5
You network contains an on-premises Active Directory domain. The domain contains a universal security group named WVDusers.You have a hybrid Azure Active Directory (Azure AD) tenant. WVDusers syncs to Azure AD. You have a Windows Virtual Desktop host pool that contains four Windows 10 Enterprise multisession hosts.You need to ensure that only the members of WVDusers can establish Windows Virtual Desktop sessions to the host pool. What should you do?
A. Assign WVDusers to an Azure role scoped to each host pool.
B. On each session host, add WVDusers to the local Remote Desktop Users group.
C. Assign WVDusers to an Azure role scoped to the session hosts.
D. Assign WVDusers to an application group.
Question # 6
You have a Windows Virtual Desktop deployment. You need to provide external users with access to the deployment. The external users have computers that run Windows 10 Pro and Windows 10 Enterprise. The users do not have the ability to install applications. What should you recommend that the users use to connect to the deployment?
A. Microsoft Edge
B. RemoteApp and Desktop Connection
C. Remote Desktop Manager
D. Remote Desktop Connection
Question # 7
You have an Azure Virtual Desktop deployment that contains a host pool named Pool1.Pool1 contains a session host named Host1 that is Azure AD-joined. You need to verify whether a Windows license is assigned to Host1.What should you do?
A. From the Azure Active Directory admin center, view the product licenses.
B. From VM1, run the Get-windowsDeveloperLicense cmdlet.
C. From the Azure portal, view the properties of Host1.
D. From Azure Cloud Shell, run the Get-Azvm cmdlet
Question # 8
Your network contains an on-premises Active Directory domain and a Windows Virtual Desktop deployment. The computer accounts for all the session hosts are in an organizational unit (OU) named WVDHostsOU. All user accounts are in an OU named CorpUsers. A domain administrator creates a Group Policy Object (GPO) named Policy1 that only contains user settings. The administrator links Policy1 to WVDHostsOU. You discover that when users sign in to the session hosts, none of the settings from Policy1 are applied. What should you configure to apply GPO settings to the users when they sign in to the session hosts?
A. loopback processing
B. FSLogix profiles
C. mandatory Roaming User Profiles
D. restricted groups
Question # 9
You have a Windows Virtual Desktop host pool named Pool1. You are troubleshooting an issue for a Remote Desktop client that stopped responding. You need to restore the default Remote Desktop client settings and unsubscribe from all workspaces. Which command should you run?
A. msrdcw
B. resetengine
C. mstsc
D. resetpluginhost
Question # 10
You have a Windows Virtual Desktop host pool that contains 20 Windows 10 Enterprise multi-session hosts. Users connect to the Windows Virtual Desktop deployment from computers that run Windows 10. You plan to implement FSLogix Application Masking. You need to deploy Application Masking rule sets. The solution must minimize administrative effort. To where should you copy the rule sets?
A. the FSLogix profile container of each user
B. C:\Program Files\FSLogix\Apps\Rules on every Windows 10 computer
C. C:\Program Files\FSLogix\Apps\Rules on every session host
Question # 11
You have a Windows Virtual Desktop host pool that contains two session hosts. The Microsoft Teams client is installed on each session host. You discover that only the Microsoft Teams chat and collaboration features work. The calling and meeting features are disabled. You need to ensure that users can set the calling and meeting features from within Microsoft Teams. What should you do?
A. Install the Remote Desktop WebRTC Redirector Service.
B. Configure Remote audio mode in the RDP Properties.
C. Install the Teams Meeting add-in for Outlook.
D. Configure audio input redirection.
Question # 12
You have an Azure Virtual Desktop deployment.You plan to use just-in-time (JIT) VM access to manage session host virtual machines.You need to recommend license requirements for JIT VM access. Your solution must minimize costs. Which license should you recommend?
A. Microsoft Defender for Servers Plan 2
B. Microsoft 365 E5
C. Enterprise Mobility + Security E5
D. Microsoft Defender for Servers Plan 1
Question # 13
You have an Azure Virtual Desktop deployment that uses Azure Active Directory Domain Services (Azure AD DS). You have the following host pool:Name: Pool1 Type: PersonalNumber of session hosts: 5You plan to deploy two new session hosts to Pool1. What should you do before you deploy the session hosts?
A. Create a scaling plan.
B. Precreate a computer account in Azure AD DS.
C. Increase the maximum session limit.
D. Create a registration key.
Question # 14
You have a Windows Virtual Desktop deployment that contains the following: A host pool named Pool1 Two session hosts named Host1 and Host2 An application group named RemoteAppGroup1 that contains a RemoteApp named App1 You need to prevent users from copying and pasting between App1 and their local device. What should you do?
A. Create an AppLocker policy.
B. Modify the locks of RemoteAppGroup1.
C. Modify the locks of RemoteAppGroup1.
D. Modify the RDP Properties of Pool1.
Question # 15
You have a Windows Virtual Desktop deployment. You publish a RemoteApp named AppVersion1. You need AppVersion1 to appear in the Remote Desktop client as Sales Contact Application. Which PowerShell cmdlet should you use?
A. New-AzADApplication
B. Update-AzWvdApplicationGroup
C. Register-AzWvdApplicationGroup
D. Update-AzWvdApplication
Question # 16
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have a Windows Virtual Desktop host pool named Pool1 that is integrated with an Azure Active Directory Domain Services (Azure AD DS) managed domain. You need to configure idle session timeout settings for users that connect to the session hosts in Pool1.Solution: From the Azure portal, you modify the Session behavior settings in the RDP Properties of Pool1. Does that meet the goal?
A. Yes
B. No
Question # 17
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Windows Virtual Desktop host pool named Pool1 that is integrated with an Azure Active Directory Domain Services (Azure AD DS) managed domain. You need to configure idle session timeout settings for users that connect to the session hosts in Pool1. Solution: From an Azure AD DS-joined computer, you modify the AADDC Computers GPO settings. Does that meet the goal?
A. Yes
B. No
Question # 18
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a W indows Virtual Desktop host pool named Pool1 that is integrated with an Azure Active Directory Domain Services (Azure AD DS) managed domain. You need to configure idle session timeout settings for users that connect to the session hosts in Pool1. Solution: From an Azure AD DS-joined computer, you modify the AADDC Computer GPO settings. Does that meet the goal?
A. Yes
B. No
Question # 19
You have a Windows Virtual Desktop host pool. You need to install Microsoft Antimalware for Azure on the session hosts. What should you do?
A. Add an extension to each session host.
B. From a Group Policy Object (GPO), enable Windows 10 security features.
C. Configure the RDP Properties of the host pool.
D. Sign in to each session host and install a Windows feature.
Question # 20
You have a Windows Virtual Desktop host pool named Pool1 and an Azure Storage account named Storage1. Storage1 stores FSLogix profile containers in a share folder named share1. You create a new group named Group1. You provide Group1 with permission to sign in to Pool1. You need to ensure that the members of Group1 can store the FSLogix profile containers in share1. The solution must use the principle of least privilege. Which two privileges should you assign to Group1? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A. the Storage Blob Data Contributor role for storage1
B. the List folder / read data NTFS permissions for share1
C. the Modify NTFS permissions for share1
D. the Storage File Data SMB Share Reader role for storage1
E. the Storage File Data SMB Share Elevated Contributor role for storage1
F. the Storage File Data SMB Share Contributor role for storage1
Question # 21
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Windows Virtual Desktop host pool that contains five session hosts. The session hosts run Windows 10 Enterprise multi-session. You need to prevent users from accessing the internet from Windows Virtual Desktop sessions. The session hosts must be allowed to access all the required Microsoft services. Solution: You configure the Address space settings of the virtual network that contains the session hosts. Does that meet the goal?
A. Yes
B. No
Question # 22
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Windows Virtual Desktop host pool that contains five session hosts. The session hosts run Windows 10 Enterprise multi-session. You need to prevent users from accessing the internet from Windows Virtual Desktop sessions. The session hosts must be allowed to access all the required Microsoft services. Solution: You configure rules in the network security group (NSG) linked to the subnet of the session hosts. Does that meet the goal?
A. Yes
B. No
Question # 23
You have a hybrid Azure Active Directory (Azure AD) tenant.You plan to deploy an Azure Virtual Desktop personal host pool. The host pool will contain 15 virtual machines that run Windows 10 Enterprise. The virtual machines will be joined to the on-premises Active Directory domain and used by the members of a domain group named Department1.You need to ensure that each user is added automatically to the local Administrators group on the virtual machine to which the user signs in. What should you configure?
A. a role assignment for the host pool
B. a role assignment for each virtual machine
C. a policy preference in a Group Policy Object (GPO)
D. a device setting in Azure AD
Question # 24
You have an Azure Virtual Desktop deployment. You plan to use FSLogix profile containers.You need to recommend a solution that will be used to store the containers. The solution must meet the following requirements:* The containers must be stored on solid-state drives (SSDs) * Minimize administrative effort * Minimize cost the What should you recommend?
A. Azure NetApp Files
B. Azure Files Standard
C. Azure Blob Storage Premium
D. Azure Files Premium
Question # 25
You plan to deploy Windows Virtual Desktop session host virtual machines based on a preconfigured master image. The master image will be stored in a shared image. You create a virtual machine named Image1 to use as the master image. You install applications and apply configuration changes to Image1. You need to ensure that the new session host virtual machines created based on Image1 have unique names and security identifiers. What should you do on Image1 before you add the image to the shared image gallery?
A. At a command prompt, run the set computername command
B. At a command prompt, run the sysprep command.
C. From PowerShell, run the rename-computer cmdlet.
D. From the lock screen of the Windows device, perform a Windows Autopilot Reset.
Question # 26
You have an on-premises network and an Azure subscription. The subscription contains the following virtual network:* Name:VNet1 * Address space: 10.10.0.0 * Subnet name: Subnet1 * Subnet1 address range: 10.10.0.0You deploy an Azure Virtual Desktop host pool that contains 10 session hosts to Subnets.You plan to deploy a VPN gateway to VNet1 and provide the session hosts with access to the onpremises network.You need to ensure that you can deploy the VPN gateway. What should you do first?
A. Modify the address range of Subnet1. Most Voted
B. Add a subnet named GatewaySubnet to VNet1.
C. Modify the address space of VNet1. Most Voted
D. Associate a network security group (NSG) to Subnet1.
Question # 27
You deploy a Windows Virtual Desktop host pool named Pool1. You have an Azure Storage account named store1 that stores FSLogix profile containers in a share named profiles. You need to configure the path to the storage containers for the session hosts. Which path should you use?
A. \\store1.blob.core.windows.net\profiles
B. https://store1.file.core.windows.net/profiles
C. \\store1.file.core.windows.net\profiles
D. https://store1.blob.core.windows.net/profiles
Question # 28
You plan to deploy Windows Virtual Desktop. The deployment will use existing virtual machines. You create a Windows Virtual Desktop host pool. You need to ensure that you can add the virtual machines to the host pool. What should you do first?
A. Register the Microsoft.DesktopVirtualization provider.
B. Generate a registration key
C. Run the Invoke-AzVMRunCommand cmdlet.
D. Create a role assignment.
Question # 29
You plan to deploy Azure Virtual DesktopYou are deploying Storage Spaces Direct to a cluster that will store FSLogix profile containers. The cluster will NOT use Cloud witness.What is the minimum number of virtual machines required for the cluster?
A. 1
B. 2
C. 3
D. 4
Question # 30
You have an Azure Virtual Desktop deployment that contains an Azure compute gallery. The Azure compute gallery contains an image definition named Definitions Definitionl contains the following image versions:* 1.0.0 * 1.1.0 * 1.2.0 You need to ensure that when a virtual machine is created from the Azure compute gallery, the 1.1.0 image version is used by default. What should you do?
A. Select Exclude from latest for image version 1.0.0.
B. Select Exclude from latest for image version 1.2.0. Most Voted
C. Apply a lock to image version 1.1.0.
D. Apply a tag named default to image version 1.1.0.
Question # 31
You have an Azure subscription that contains 500 users. The users are assigned Microsoft Office 365 E1 licenses.You deploy an Azure Virtual Desktop solution that contains Windows 10 multi-session hosts and streams a custom remote app named App1.You need to ensure that the users are licensed to stream App1. The solution must minimize costs. Which license should you use?
A. Microsoft 365 E5
B. Office 365 E3
C. a Remote Desktop Services (RDS) client access license (CAL)
D. Windows 10 Enterprise E3
Question # 32
You deploy an Azure Virtual Desktop session host pool. You need to provide a group of pilot users access to the virtual machines in the pool.What should you do?
A. Create a role definition.
B. Add the users to a Remote Desktop Users group on the virtual machines.
C. Add the users to the local Administrators group on the virtual machines.
D. Create a role assignment.
Question # 33
You have an Azure Virtual Desktop deployment.You have a RemoteApp named App1. You discover that from the Save As dialog box of App1, users can run executable applications other than App1 on the session hostsYou need to ensure that the users can run only published applications on the session hosts. What should you do?
A. Configure a conditional access policy in Azure Active Directory (Azure AD).
B. Modify the Access control (1AM) settings of the host pool.
C. Modify the RDP Properties of the host pool.
D. Configure an AppLocker policy on the session hosts.
Question # 34
You have an Azure Active Directory (Azure AD) tenant named contoso.com and an Azure virtual network named VNET1. To VNET1, you deploy an Azure Active Directory Domain Services (Azure AD DS) managed domain named litwareinc.com. To VNET1, you plan to deploy a Windows Virtual Desktop host pool named Pool1. You need to ensure that you can deploy Windows 10 Enterprise host pools to Pool1. What should you do first?
A. Modify the settings of the litwareinc.com DNS zone.
B. Modify the DNS settings of VNET1.
C. Add a custom domain name to contoso.com.
D. Implement Azure AD Connect cloud sync.
Question # 35
Your on-premises network contains 20 Windows 10 devices. You have an Azure Virtual Desktop deployment. You need to deploy the Microsoft Remote Desktop client (MSRDC) to the devices. The MSRDC must be available to everyone who sign in to the devices. What should you do?
A. Install the MSRDC by using msiexec.exe and the ALLUSERS=1 command line option
B. Install the MSRDC by using msiexec.exe and the ALLUSERS=2 command line option
C. Install the MSRDC by using msiexec.exe and the MSIINSTALLPERUSER=1 command line option.
Question # 36
You need to deploy the session hosts to meet the deployment requirements Which PowerShell cmdlel should you run first?
A. New-AzwvdRegistratrationinfo
B. Get-AzApiManagementSsoToken
C. Set-AzWMADDomainExtension
D. Update-AZwvdSessionHost
Question # 37
You have an Azure Virtual Desktop deployment that contains a host pool. The host pool contains 10 session hosts. The session hosts are configured by using a custom image and ephemeral disks. You need to deploy Microsoft OneDrive for Business. Which two actions should you perform for each session host? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A. Install FSLogix.
B. Install the OneDrive sync app by using the per-machine installation option
C. Implement Application Masking
D. Install the OneDrive sync app by using the per-user installation option.
E. Deploy an MSIX app attach package.
Question # 38
You need to modify the custom virtual machine images to meet the deployment requirements. What should you install?
A. the RSAT: Remote Desktop Services Tools optional feature
B. the Azure Virtual Desktop Agent
C. the Microsoft Monitoring Agen
D. the FSLogix agent
Question # 39
You have an Azure Virtual Desktop deployment that contains a host pool. The host pool contains 15session hosts. All the sessions hosts have FSLogix installed. You need to configure the path to where the user profiles are stored. The solution must minimize administrative effort. Which registry setting should you use?
A. VHDLocations
B. CCDLocations
C. ProfileDirSDDL
D. FlipFlopProfileDirectoryName
Question # 40
You need to implement network security to meet the security requirements and the performance requirements. Which two actions should you perform? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.
A. Deploy two Azure Firewall instances and Azure Firewall Manager
B. Filter traffic by using outbound rules.
C. Filter traffic by using infrastructure rules.
D. Filter traffic by using inbound rules
E. Deploy a network security group (NSG) and two application security groups
F. Deploy an Azure Firewall instance and Azure Firewall Manager.
Question # 41
You need to ensure the resiliency of the user profiles for the Boston office users. The solution must meet the user performance requirements. What should you do?
A. Modify the Account kind setting of storage1.
B. Modify the replication settings of storage1.
C. Implement Azure Site Recovery.
D. Configure Cloud Cache.
Question # 42
You need to configure the user settings of Admin1 to meet the user profile requirements. What should you do?
A. Modify the membership of the FSLogix ODFC Exclude List group.
B. Modify the membership of the FSLogix Profile Exclude List group.
C. Modify the HKLM\SOFTWARE\FSLogix\Profiles registry settings.
D. Modify the HKLM\SOFTWARE\FSLogix\ODFC registry settings.
Question # 43
Which two roles should you assign to Admin2 to meet the security requirements? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point
A. Desktop Virtualization Host Pool Contributor
B. Desktop Virtualization Application Group Contributor
C. Desktop Virtualization Workspace Contributor
D. Desktop Virtualization Application Group Reader
E. User Access Administrator
Question # 44
You have an Azure Virtual Desktop host pool named Pool1 that contains the following: A linked workspace named Workspace1An application group named Default Desktop A session host named Host1 You need to add a new data disk. What should you modify?
A. Host1
B. Workspace 1
C. Pool1
D. Default Desktop
Question # 45
You have an Azure Active Directory (Azure AD) tenant named contoso.com.You use a user account named Admin1 to deploy an Azure Active Directory Domain Services (Azure AD DS) managed domain named aaddscontoso.com to a virtual network named VNET1.You plan to deploy an Azure Virtual Desktop host pool named Pool1 to VNET1. You need to ensure that you can use the Admin1 user account to deploy Windows 10 Enterprise session hosts to Pool1. What should you do first?
A. Add Admin1 to the AA Change Host pool type to Pooled and specify Load D DC Administrators
group ofcontoso.com
B. Assign the Cloud device administrator role to Admin1.
C. Assign a Microsoft 365 Enterprise E3 license to Admin1.
D. Change the password of Admin1.
Question # 46
You need to recommend an authentication solution that meets the performance requirements. Which two actions should you include in the recommendation? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A. Join all the session hosts to Azure AD.
B. In each Azure region that will contain the Windows Virtual Desktop session hosts, create an AzureActive Directory Domain Service (Azure AD DS) managed domain
C. Deploy domain controllers for the on-premises Active Directory domain on Azure virtual machines
D. Deploy read-only domain controllers (RODCs) on Azure virtual machines.
E. In each Azure region that will contain the Windows Virtual Desktop session hosts, create an Active
Directory site.
Question # 47
Which three PowerShell modules should you install on Server1 to meet the technical requirements? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A. Pester
B. RemoteDesktop
C. ServerManager
D. ActiveDirectory
E. Hyper-V
Question # 48
You have an Azure Virtual Desktop deployment that contains a session host named Host1. You need to configure Windows Defender Firewall to allow inbound network traffic for RDP Shortpath on Host1. Which program in the C:\Windows\System32 folder should you specify in the inbound firewall rule?
A. Rdpshell.exe
B. Svchost.exe
C. Raserver.exe
D. Mstsc.exe
Question # 49
You have an Azure Virtual Desktop personal host pool named Pool1 that contains 20 Azure AD-joined session hosts.You need to ensure that only approved virtual machine extensions are installed on the Pool 1 session hosts. The solution must minimize administrative effort.What should you use?
A. Azure Resource Manager (ARM) templates
B. Azure Policy
C. Windows Admin Center
D. Group Policy
Question # 50
You have an Azure Virtual Desktop pooled host pool named HostPool1. You need to dynamically allocate resources to HostPool1 based on the number of sessions for each host. What should you create?
A. a load balancer rule
B. a scaling plan
C. a virtual machine scale set
D. an availability set
Question # 51
Which setting should you modify for VNET4 before you can deploy Pool4?
A. Service endpoints
B. Address space
C. DNS servers
D. Access control (1AM)
E. Peerings
Question # 52
You need to configure the virtual machines that have the Pool1 prefix. The solution must meet the technical requirements. What should you use?
A. a Windows Virtual Desktop automation task
B. Virtual machine auto-shutdown
C. Service Health in Azure Monitor
D. Azure Automation
Question # 53
You need to configure the device redirection settings. The solution must meet the technical requirements. Where should you configure the settings?
A. Workspace1
B. MontrealUsers
C. Group1
D. Pool1
Question # 54
Which role should you assign to Operator2 to meet the technical requirements?
A. Desktop Virtualization Session Host Operator
B. Desktop Virtualization Host Pool Contributor
C. Desktop Virtualization User Session Operator
D. Desktop Virtualization Contributor
Question # 55
You plan to implement the FSLogix profile containers for the Seattle office. Which storage account should you use?
A.storage2
B. storage4
C. storage3
D. storage1
Question # 56
You have an Azure Virtual Desktop deployment.You plan to create a new host pool named Pool1 that will contain five Windows 11 session hosts. You need to enable secure boot and vTPM on the session hosts. How should you configure the Virtual Machines settings?
A. Enable encryption at rest and a platform-managed key.
B. Set Security type to Trusted launch virtual machines.
C. Enable a system-assigned managed identity.
D. Set Network security group to Advanced.
Question # 57
You have an Azure subscription named Subscription that contains an Azure Virtual Desktop host pool named HostPool1.HostPool1 is managed by using Microsoft Intune. Subscription1 contains 50 users that connect to HostPool1 by using computers that run Windows 10.You need to prevent the users from copying files between an Azure Virtual Desktop session and the computers. The solution must minimize administrative effort.What should you do?
A. Modify the RDP properties of HostPool1
B. Create a Conditional Access policy in Azure Active Directory (Azure AD).
C. Create a compliance policy in Intune.
D. Create a configuration profile in Intune.
Question # 58
You have an Azure Virtual Desktop deploymentYou plan to deploy Update Management to manage automated updates for server-based session hosts.You need to configure the prerequisites for Update Management.Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A. Create a Log Analytics workspace
B. Create an Azure Automation account.
C. Create an Azure Service Health alert rule.
D. Enable the Application Insights Agent.
E. Configure Azure Network Watcher.
Question # 59
You have an Azure Virtual Desktop host pool. The pool contains session hosts that run Windows 10 Enterprise multi-session.You connect to a Remote Desktop session on Pool1 and discover an issue with the frequency of screen updates.You need to identify whether the issue relates to insufficient server, network, or client resources. The solution must minimize how long it takes to identify the resource type.What should you do?
A. From within the current session, use the Azure Virtual Desktop Experience Estimator.
B. From Azure Cloud Shell, run the Get-AzOperationalInsightsWorkspaceUsage cmdlet and specify the DefaultProfile parameter.
C. From Azure Cloud Shell, run the Get-AzWvdUserSession cmdlet and specify the UserSessionId
parameter.
D. From within the current session, use Performance Monitor to display the values of all the
RemoteFX Graphics(*)\Frames Skipped/Second counters.
Question # 60
You have an Azure Virtual Desktop host pool named Pool1 in the East US region.You have a storage account named storage1 that contains FSLogix profile containers. In the East USregion, you have a shared image gallery named SIG1 that contains a virtual machine image named Image1. Image1 is used to create new session hosts in Pool1. You plan to deploy a new Azure Virtual Desktop host pool named Pool2 to the South India region. You need to implement a session host deployment solution for Pool2 that meets the following requirements: Image1 must replicate in the South India region. The session hosts in Pool2 must be based on Image1. Changes to Image1 must be available in the South India and East US regions. What should you include in the solution?
A. Create a new shared image gallery named SIG2 in the South India region. Upload a copy of Image1 to SIG2.
B. Create a new Azure Storage account named storage2 in the South India region. Copy Image1 to a
shared folder in storage2.
C. From SIG1, update the replication for the latest image version of Image1.
D. Configure geo-redundant storage (GRS) replication for storage1. Copy the VHD file of Image1 to
the FSLogix profile container.
Question # 61
You are designing an Azure Virtual Desktop deployment.You identify the network latency between the locations where users reside and the planned deployment. What should you use to identify the best Azure region to deploy the host pool?
A. Azure Traffic Manager
B. Azure Virtual Desktop Experience Estimator
C. Azure Monitor for Azure Virtual Desktop
D. Azure Advisor