AZ-140 Configuring and Operating Microsoft Azure Virtual Desktop Questions and Answers

You need to ensure the resiliency of the user profiles for the Boston office users. The solution must meet the user performance requirements.

What should you do?

You need to configure a conditional access policy to meet the authentication requirements.

What should you include in the policy configuration? To answer, select the appropriate options in the answer area.

NOTE Each correct selection is worth one point.

You need to modify the custom virtual machine images to meet the deployment requirements.

What should you install?

You need to configure the user settings of Admin1 to meet the user profile requirements.

What should you do?

UESTION NO: 3

Which two roles should you assign to Admin2 to meet the security requirements? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

You need to recommend an authentication solution that meets the performance requirements.

Which two actions should you include in the recommendation? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

You need to deploy the session hosts to meet the deployment requirements Which PowerShell cmdlel should you run first?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have the following:

A Microsoft 365 E5 tenant

An on-premises Active Directory domain

A hybrid Azure Active Directory (Azure AD) tenant

An Azure Active Directory Domain Services (Azure AD DS) managed domain

An Azure Virtual Desktop deployment

The Azure Virtual Desktop deployment contains personal desktops that are hybrid joined to the on-premises domain and enrolled in Microsoft Intune.

You need to configure the security settings for the Microsoft Edge browsers on the personal desktops.

Solution: You configure a compliance policy in Intune.

Does this meet the goal?

You have an Azure subscription that contains a resource group named RG1. RG1 contains the resources shown in the following table.

Your on-premises network has an IP address range of 192.168.10.0/24. Users on Host1 can successfully connect to the resources on the network.

You add a new on-premises network that has an IP address range of 192.168.11.0/24 and contains a subnet. The subnet contains an application server named App1.

Users report that Host1 cannot connect to App1.

You need to ensure that the users on Host1 can access App1.

What should you modify?

You have a Microsoft Entra tenant named contoso.com that contains cloud-only user accounts.

You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains session hosts that are joined to contoso.com.

You plan to use FSLogix profile containers to manage user profiles.

You need to configure storage for the FSLogix solution.

Which type of storage should you use for the profile containers, and which FSLogix registry key should you configure? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a Windows Virtual Desktop host pool named Pool1 that is integrated with an Azure Active Directory Domain Services (Azure AD DS) managed domain.

You need to configure idle session timeout settings for users that connect to the session hosts in Pool1.

Solution: From the Azure portal, you modify the Session behavior settings in the RDP Properties of Pool1.

Does that meet the goal?

You have an Azure Active Directory (Azure AD) tenant named contoso.com.

You use a user account named Admin1 to deploy an Azure Active Directory Domain Services (Azure AD DS) managed domain named aaddscontoso.com to a virtual network named VNET1.

You plan to deploy an Azure Virtual Desktop host pool named Pool1 to VNET1.

You need to ensure that you can use the Admin1 user account to deploy Windows 10 Enterprise session hosts to Pool1.

What should you do first?

You have a Windows Virtual Desktop deployment.

You have a session host named Host1 that has the disk layout shown in the exhibit. (Click the Exhibit tab.)

You plan to deploy an app that must be installed on D. The app requires 500 GB of disk space.

You need to add a new data disk that will be assigned the drive letter D. The solution must maintain the current performance of Host1.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

You plan to deploy Windows Virtual Desktop. The deployment will use existing virtual machines.

You create a Windows Virtual Desktop host pool.

You need to ensure that you can add the virtual machines to the host pool.

What should you do first?

Your on-premises network contains an Active Directory Domain Services (AD DS) domain named corp.contoso.com. The domain contains two users named User1 and User2.

You have a Microsoft Entra tenant named contoso.com that contains a user named User3 and syncs with corp.contoso.com

The sync status of the users is shown in the following table.

You have an Azure Virtual Desktop deployment that contains Microsoft Entra joined session hosts.

You create an Azure Storage account that has the following configurations:

• Name: storage1

• Kind: FileStorage

• File share: share1

• Microsoft Entra Kerberos: Enabled

You need to implement FSLogix profile containers on share1. For which users can you implement a profile container?

You have a Windows Virtual Desktop deployment.

You need to ensure that all the connections to the managed resources in the host pool require multi-factor authentication (MFA).

Which two settings should you modify in a conditional access policy? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an Azure Virtual Desktop host pool named Pool1.

You need to ensure that you can create an Azure NetApp Files volume that will host user profiles for Pool1.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select.

You have an Azure Virtual Desktop host pool named Pooll. All the session hosts in Pooll are assigned private IP addresses only.

You need to ensure that administrators can connect remotely to the session hosts. The solution must ensure that the administrators can connect to the session hosts by using Azure Command-Line Interface (CLI) and the Remote Desktop client for Windows.

What should you include in the solution?

Your network contains an on-premises Active Directory domain and a Windows Virtual Desktop deployment.

The computer accounts for all the session hosts are in an organizational unit (OU) named WVDHostsOU. All user accounts are in an OU named CorpUsers.

A domain administrator creates a Group Policy Object (GPO) named Policy1 that only contains user settings.

The administrator links Policy1 to WVDHostsOU.

You discover that when users sign in to the session hosts, none of the settings from Policy1 are applied.

What should you configure to apply GPO settings to the users when they sign in to the session hosts?

You have a Windows Virtual Desktop deployment.

Many users have iOS devices that have the Remote Desktop Mobile app installed.

You need to ensure that the users can connect to the feed URL by using email discovery instead of entering the feed URL manually.

How should you configure the _msradc DNS record? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an Azure subscription that is linked to a hybrid Microsoft Entra tenant and contains a storage account named storage1.

You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains session hosts that are Microsoft Entra joined.

You plan to implement FSLogix profile containers for the session hosts of Pool1.

In storage1, you create a new Azure Files share named share1.

You need to ensure that share! can store the FSLogix profile containers.

What should you enable for share!?

You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. You plan to create a Windows 10 image named Image1 to deploy new session hosts to Pool1.

You need to ensure that all the new session hosts deployed by using Image1 are onboarded to Microsoft Defender for Endpoint. What should you do?

You have an Azure Virtual Desktop deployment that contains the host pools shown in the following table.

You need to create a disaster recovery environment in the West US region. The solution must minimize costs and administrative effort.

What should you do?

You have an Azure Virtual Desktop deployment that contains a host pool named PoolL All the session hosts in Pool! are Microsoft Entra joined, You have 50 users that will access the deployment by using devices that run Linux. You need to ensure that the users can sign in to the deployment. Which custom RDP property should you configure?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have the following:

A Microsoft 365 E5 tenant

An on-premises Active Directory domain

A hybrid Azure Active Directory (Azure AD) tenant

An Azure Active Directory Domain Services (Azure AD DS) managed domain

An Azure Virtual Desktop deployment

The Azure Virtual Desktop deployment contains personal desktops that are hybrid joined to the on-premises domain and enrolled in Microsoft Intune.

You need to configure the security settings for the Microsoft Edge browsers on the personal desktops.

Solution: You configure a configuration profile in Intune.

Does this meet the goal?

You have an Azure Virtual Desktop deployment that has just-in-time (JIT) VM access enabled.

You need to request access to a session host by using JIT VM access.

Which three virtual machine settings can you use to request access? To answer, select the appropriate settings in the answer area.

NOTE: Each selection is worth one point.

Which users can create Pool4, and which users can join session hosts to the domain? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an Azure subscription.

You plan to deploy Azure Virtual Desktop.

You need to maximize network throughput for the session hosts in the deployment.

What will have the largest impact on the network throughput of each session host?

You plan to implement the FSLogix profile containers for the Seattle office.

Which storage account should you use?

You need to evaluate the RDS deployment in the Seattle office. The solution must meet the technical requirements.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Which setting should you modify for VNET4 before you can deploy Pool4?

You need to configure the virtual machines that have the Pool1 prefix. The solution must meet the technical requirements.

What should you use?

Which role should you assign to Operator2 to meet the technical requirements?

Which three PowerShell modules should you install on Server1 to meet the technical requirements? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

You need to configure the device redirection settings. The solution must meet the technical requirements.

Where should you configure the settings?

You are planning the deployment of Pool4.

What will be the maximum number of users that can connect to Pool4, and how many session hosts are needed to support five concurrent user sessions? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

What should you do to meet the user profile requirements?

Which two actions should you perform to meet the security requirements for Defender for Endpoint? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

You need to create a Conditional Access policy to meet the security require-ments.

How should you configure the policy? To answer, select the appropriate options in the answer area.

Which settings should you configure to meet the performance requirements?

What should you do to meet the application requirements? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Which type of host pool and load balancing algorithm should you configure to meet the performance requirements? To answer, select the appropriate options in The answer area.

NOTE: Each correct selection is worth one point.

You need to prepare the disk on VM1 for use with the Azure Virtual Desktop deployment. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

What should you configure to meet the networking requirements?

Which monitoring solution should you configure to meet the security requirements?

What should you do to ensure that the session hosts meet the application requirements for App1?

Which host pool design and which service should you configure to meet the disaster recovery requirements? To answer, drag the appropriate solution to the correct requirements. Each solution may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content

NOTE: Each correct selection is worth one point.