Microsoft Configuring and Operating Microsoft Azure Virtual Desktop - AZ-140 FREE EXAM DUMPS QUESTIONS & ANSWERS
Hotspot Question
You have a Azure Virtual Desktop host pool that has a max session limit of 15. Disconnected sessions are signed out immediately.
The session hosts for the host pool are shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
You have a Azure Virtual Desktop host pool that has a max session limit of 15. Disconnected sessions are signed out immediately.
The session hosts for the host pool are shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Correct Answer:
Explanation:
Users in pooled host pools aren't assigned to specific session hosts.
When an assigned user launches the desktop in their feed, they will claim an available session host if they have not already connected to the host pool, which completes the assignment process.
https://docs.microsoft.com/en-us/azure/virtual-desktop/configure-host-pool-personal-desktop-assignment-type
Hotspot Question
You have an Azure Virtual Desktop deployment.
You are configuring the outbound firewall settings for the host pool.
Which outbound URL and outbound port should you configure to ensure that the host machines maintain Windows activation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You have an Azure Virtual Desktop deployment.
You are configuring the outbound firewall settings for the host pool.
Which outbound URL and outbound port should you configure to ensure that the host machines maintain Windows activation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Correct Answer:
Explanation:
https://learn.microsoft.com/en-us/azure/virtual-desktop/safe-url-list?tabs=azure#session-host-virtual-machines
You have an Azure Virtual Desktop deployment.
You use Hyper-V to create a virtual machine that runs Windows 10 and has the following configurations:
- Virtual machine generation: Generation 1
- Disk type: Dynamically expanding
- Disk format: VHDX
- Disk size: 2 TB
You need to prepare the virtual machine before uploading it to Azure.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
You use Hyper-V to create a virtual machine that runs Windows 10 and has the following configurations:
- Virtual machine generation: Generation 1
- Disk type: Dynamically expanding
- Disk format: VHDX
- Disk size: 2 TB
You need to prepare the virtual machine before uploading it to Azure.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
Correct Answer: C,E
Vote an answer
Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).
Hotspot Question
You have an on-premises network.
All users have computers that run Windows 10 Pro.
You plan to deploy Azure Virtual Desktop to meet the department requirements shown in the following table.
You need to recommend licenses for the departments. The solution must minimize costs.
Which license should you recommend for each department? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You have an on-premises network.
All users have computers that run Windows 10 Pro.
You plan to deploy Azure Virtual Desktop to meet the department requirements shown in the following table.
You need to recommend licenses for the departments. The solution must minimize costs.
Which license should you recommend for each department? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Correct Answer:
Explanation:
Licence entitlement: There is no additional cost if you have an eligible Windows, Microsoft 365 or Microsoft Remote Desktop Services (RDS) Client Access Licence (CAL).
https://azure.microsoft.com/en-gb/pricing/details/virtual-desktop/
You have an Azure Virtual Desktop deployment that contains a session host named Host1.
You need to configure Windows Defender Firewall to allow inbound network traffic for RDP Shortpath on Host1.
Which program in the C:\Windows\System32 folder should you specify in the inbound firewall rule?
You need to configure Windows Defender Firewall to allow inbound network traffic for RDP Shortpath on Host1.
Which program in the C:\Windows\System32 folder should you specify in the inbound firewall rule?
Correct Answer: C
Vote an answer
Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).
You have an Azure subscription that contains an Azure Virtual Desktop deployment. The deployment contains a host pool named Pool.
Users access the deployment by using the Windows client for Azure Virtual Desktop.
You need to ensure that the users must reauthenticate every eight hours. The solution must minimize administrative effort.
What should you do?
Users access the deployment by using the Windows client for Azure Virtual Desktop.
You need to ensure that the users must reauthenticate every eight hours. The solution must minimize administrative effort.
What should you do?
Correct Answer: B
Vote an answer
Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).
You have a Azure Virtual Desktop host pool that runs Windows 10 Enterprise multi-session.
You need to configure automatic scaling of the host pool to meet the following requirements:
- Distribute new user sessions across all running session hosts.
- Automatically start a new session host when concurrent user sessions
exceed 30 users per host.
What should you include in the solution?
You need to configure automatic scaling of the host pool to meet the following requirements:
- Distribute new user sessions across all running session hosts.
- Automatically start a new session host when concurrent user sessions
exceed 30 users per host.
What should you include in the solution?
Correct Answer: D
Vote an answer
Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).
You have a Azure Virtual Desktop host pool named Pool1 and an Azure Storage account named Storage1. Storage1 stores FSLogix profile containers in a share folder named share1.
You create a new group named Group1. You provide Group1 with permission to sign in to Pool1.
You need to ensure that the members of Group1 can store the FSLogix profile containers in share1. The solution must use the principle of least privilege.
Which two privileges should you assign to Group1? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
You create a new group named Group1. You provide Group1 with permission to sign in to Pool1.
You need to ensure that the members of Group1 can store the FSLogix profile containers in share1. The solution must use the principle of least privilege.
Which two privileges should you assign to Group1? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
Correct Answer: C,D
Vote an answer
Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).
Hotspot Question
You have an Azure Virtual Desktop host pool named Pool1.
You have an Azure Compute Gallery that contains an image. The image contains the resources shown in the following table.
Pool1 contains a single session host named SH1.
You need to deploy a new session host named SH2 that will be used to perform troubleshooting.
The solution must meet the following requirements:
- SH2 must use image version 0.0.1.
- Administrative effort must be minimized.
Which two actions should you perform in order? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You have an Azure Virtual Desktop host pool named Pool1.
You have an Azure Compute Gallery that contains an image. The image contains the resources shown in the following table.
Pool1 contains a single session host named SH1.
You need to deploy a new session host named SH2 that will be used to perform troubleshooting.
The solution must meet the following requirements:
- SH2 must use image version 0.0.1.
- Administrative effort must be minimized.
Which two actions should you perform in order? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Correct Answer:
Drag and Drop Question
You have an Azure subscription that contains the storage accounts shown in the following table.
You have a custom generalized Windows 10 image.
You plan to deploy an Azure Virtual Desktop host pool that will use the custom image and FSLogix profile containers.
You need to recommend which storage accounts to use for the custom image and the profile containers. The solution must meet the following requirements:
- Minimize costs to store the image.
- Maximize performance of the profile containers.
Which account should you recommend for each type of content? To answer, drag the appropriate accounts to the correct content type. Each account may be used once, more than once, or not at all. You many need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
You have an Azure subscription that contains the storage accounts shown in the following table.
You have a custom generalized Windows 10 image.
You plan to deploy an Azure Virtual Desktop host pool that will use the custom image and FSLogix profile containers.
You need to recommend which storage accounts to use for the custom image and the profile containers. The solution must meet the following requirements:
- Minimize costs to store the image.
- Maximize performance of the profile containers.
Which account should you recommend for each type of content? To answer, drag the appropriate accounts to the correct content type. Each account may be used once, more than once, or not at all. You many need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Correct Answer:
Explanation:
For performance, BlockBlobStorage accounts provide low, consistent latency and higher transaction rates. So it has good performance.
For cost, since premium BlockBlobStorage accounts don't support tiering to hot, cool, or archive access tiers, it will cost more than General-purpose v2 accounts.
General-purpose v2 accounts support tiering like hot / cool / archive, which costs little.
You have an Azure Virtual Desktop pooled host pool named HostPool1.
You need to dynamically allocate resources to HostPool1 based on the number of sessions for each host.
What should you create?
You need to dynamically allocate resources to HostPool1 based on the number of sessions for each host.
What should you create?
Correct Answer: A
Vote an answer
Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).
You have an Azure Virtual Desktop session host named Host1.
You need to check the status of Microsoft Defender Antivirus on Host1.
Which PowerShell cmdlet should you run?
You need to check the status of Microsoft Defender Antivirus on Host1.
Which PowerShell cmdlet should you run?
Correct Answer: D
Vote an answer
Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).
Case Study 2 - Litware, Inc
Overview
Litware, Inc. is a pharmaceutical company that has a main office in Boston, United States, and a remote office in Chennai, India.
Existing Environment. Identity Environment
The network contains an on-premises Active Directory domain named litware.com that syncs to an Azure Active Directory (Azure AD) tenant named litware.com.
The Azure AD tenant contains the users shown in the following table.
All users are registered for Azure Multi-Factor Authentication (MFA).
Existing Environment. Cloud Services
Litware has a Microsoft 365 E5 subscription associated to the Azure AD tenant. All users are assigned Microsoft 365 Enterprise E5 licenses.
Litware has an Azure subscription associated to the Azure AD tenant. The subscription contains the resources shown in the following table.
Litware uses custom virtual machine images and custom scripts to automatically provision Azure virtual machines and join the virtual machines to the on-premises Active Directory domain.
Network and DNS
The offices connect to each other by using a WAN link. Each office connects directly to the internet.
All DNS queries for internet hosts are resolved by using DNS servers in the Boston office, which point to root servers on the internet. The Chennai office has caching-only DNS servers that forward queries to the DNS servers in the Boston office.
Requirements. Planned Changes
Litware plans to implement the following changes:
Deploy Azure Virtual Desktop environments to the East US Azure region for the users in the
Boston office and to the South India Azure region for the users in the Chennai office.
Implement FSLogix profile containers.
Optimize the custom virtual machine images for the Azure Virtual Desktop session hosts.
Use PowerShell to automate the addition of virtual machines to the Azure Virtual Desktop host
pools.
Requirements. Performance Requirements
Litware identifies the following performance requirements:
Minimize network latency of the Azure Virtual Desktop connections from the Boston and
Chennai offices.
Minimize latency of the Azure Virtual Desktop host authentication in each Azure region.
Minimize how long it takes to sign in to the Azure Virtual Desktop session hosts.
Requirements. Authentication Requirements
Litware identifies the following authentication requirements:
Enforce Azure MFA when accessing Azure Virtual Desktop apps.
Force users to reauthenticate if their Azure Virtual Desktop session lasts more than eight hours.
Requirements. Security Requirements
Litware identifies the following security requirements:
Explicitly allow traffic between the Azure Virtual Desktop session hosts and Microsoft 365.
Explicitly allow traffic between the Azure Virtual Desktop session hosts and the Azure Virtual
Desktop infrastructure.
Use built-in groups for delegation.
Delegate the management of app groups to Admin2, including the ability to publish app groups
to users and user groups.
Grant Admin1 permissions to manage workspaces, including listing which apps are assigned to
the app groups.
Minimize administrative effort to manage network security.
Use the principle of least privilege.
Requirements. Deployment Requirements
Litware identifies the following deployment requirements:
Use PowerShell to generate the token used to add the virtual machines as session hosts to a
Azure Virtual Desktop host pool.
Minimize how long it takes to provision the Azure Virtual Desktop session hosts based on the
custom virtual machine images.
Whenever possible, preinstall agents and apps in the custom virtual machine images.
User Profile Requirements
Litware identifies the following user profile requirements:
* In storage1, store user profiles for the Boston office users.
* Ensure that the user profiles for the Boston office users replicate synchronously between two Azure regions.
* Ensure that Admin1 uses a local profile only when signing in to the Azure Virtual Desktop session hosts.
Hotspot Question
You need to configure a conditional access policy to meet the authentication requirements.
What should you include in the policy configuration? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Overview
Litware, Inc. is a pharmaceutical company that has a main office in Boston, United States, and a remote office in Chennai, India.
Existing Environment. Identity Environment
The network contains an on-premises Active Directory domain named litware.com that syncs to an Azure Active Directory (Azure AD) tenant named litware.com.
The Azure AD tenant contains the users shown in the following table.
All users are registered for Azure Multi-Factor Authentication (MFA).
Existing Environment. Cloud Services
Litware has a Microsoft 365 E5 subscription associated to the Azure AD tenant. All users are assigned Microsoft 365 Enterprise E5 licenses.
Litware has an Azure subscription associated to the Azure AD tenant. The subscription contains the resources shown in the following table.
Litware uses custom virtual machine images and custom scripts to automatically provision Azure virtual machines and join the virtual machines to the on-premises Active Directory domain.
Network and DNS
The offices connect to each other by using a WAN link. Each office connects directly to the internet.
All DNS queries for internet hosts are resolved by using DNS servers in the Boston office, which point to root servers on the internet. The Chennai office has caching-only DNS servers that forward queries to the DNS servers in the Boston office.
Requirements. Planned Changes
Litware plans to implement the following changes:
Deploy Azure Virtual Desktop environments to the East US Azure region for the users in the
Boston office and to the South India Azure region for the users in the Chennai office.
Implement FSLogix profile containers.
Optimize the custom virtual machine images for the Azure Virtual Desktop session hosts.
Use PowerShell to automate the addition of virtual machines to the Azure Virtual Desktop host
pools.
Requirements. Performance Requirements
Litware identifies the following performance requirements:
Minimize network latency of the Azure Virtual Desktop connections from the Boston and
Chennai offices.
Minimize latency of the Azure Virtual Desktop host authentication in each Azure region.
Minimize how long it takes to sign in to the Azure Virtual Desktop session hosts.
Requirements. Authentication Requirements
Litware identifies the following authentication requirements:
Enforce Azure MFA when accessing Azure Virtual Desktop apps.
Force users to reauthenticate if their Azure Virtual Desktop session lasts more than eight hours.
Requirements. Security Requirements
Litware identifies the following security requirements:
Explicitly allow traffic between the Azure Virtual Desktop session hosts and Microsoft 365.
Explicitly allow traffic between the Azure Virtual Desktop session hosts and the Azure Virtual
Desktop infrastructure.
Use built-in groups for delegation.
Delegate the management of app groups to Admin2, including the ability to publish app groups
to users and user groups.
Grant Admin1 permissions to manage workspaces, including listing which apps are assigned to
the app groups.
Minimize administrative effort to manage network security.
Use the principle of least privilege.
Requirements. Deployment Requirements
Litware identifies the following deployment requirements:
Use PowerShell to generate the token used to add the virtual machines as session hosts to a
Azure Virtual Desktop host pool.
Minimize how long it takes to provision the Azure Virtual Desktop session hosts based on the
custom virtual machine images.
Whenever possible, preinstall agents and apps in the custom virtual machine images.
User Profile Requirements
Litware identifies the following user profile requirements:
* In storage1, store user profiles for the Boston office users.
* Ensure that the user profiles for the Boston office users replicate synchronously between two Azure regions.
* Ensure that Admin1 uses a local profile only when signing in to the Azure Virtual Desktop session hosts.
Hotspot Question
You need to configure a conditional access policy to meet the authentication requirements.
What should you include in the policy configuration? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Correct Answer:
Explanation:
https://docs.microsoft.com/en-us/azure/virtual-desktop/set-up-mfa
You have an Azure Virtual Desktop host pool named Pool1. Pool1 contains session hosts that run Windows 11 Enterprise multi-session.
You need to use Performance Monitor to troubleshoot a poor frame quality issue that is affecting a current user session to Pool1.
Which performance counter should you use?
You need to use Performance Monitor to troubleshoot a poor frame quality issue that is affecting a current user session to Pool1.
Which performance counter should you use?
Correct Answer: A
Vote an answer
Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).