Big Halloween Sale 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: save70

Free and Premium Microsoft AZ-140 Dumps Questions Answers

Page: 1 / 13
Total 276 questions

Configuring and Operating Microsoft Azure Virtual Desktop Questions and Answers

Question 1

You have an Azure Virtual Desktop deployment that contains the resources shown in the following table.

You need to enable just-in-time (JIT) VM access for all the session hosts.

What should you do first?

Options:

A.

Deploy Azure Bastion to VNET1.

B.

Assign network security groups (NSGs) to the network interfaces of the five session hosts.

C.

Configure Access control (IAM) for HostPool1.

D.

Assign a network security group (NSG) to Subnet1.

Buy Now
Question 2

You have an Azure Virtual Desktop host pool that runs Windows 10 Enterprise multi-session. User sessions are load-balanced between the session hosts. Idle session timeout is 30 minutes. You plan to shut down a session host named Host1 to perform routine maintenance. You need to prevent new user sessions to Host1 without disconnecting active user sessions.

Solution: From the Azure portal, add lock on Host1. Does this meet the goal?

Options:

A.

Yes

B.

No

Question 3

You have a shared image gallery that contains the Windows 10 images shown in the following table.

You create a Windows Virtual Desktop deployment that has the following settings:

    Host pool name: Pool1

    Location: West US

    Host pool type: Personal

Which images can you use for the session hosts?

Options:

A.

Image1 only

B.

Image1, Image2, Image3, and Image4

C.

Image2 only

D.

Image1 and Image2 only

E.

Image1 and Image3 only

Question 4

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a Windows Virtual Desktop host pool named Pool1 that is integrated with an Azure Active Directory Domain Services (Azure AD DS) managed domain.

You need to configure idle session timeout settings for users that connect to the session hosts in Pool1.

Solution: From an Azure AD DS-joined computer, you modify the AADDC Computers GPO settings.

Does that meet the goal?

Options:

A.

Yes

B.

No

Question 5

You have an Azure subscription named Sub1 and a Microsoft 365 E5 subscription.

The tenant contains user accounts for all internal users and users from a partner company named Fabrikam, Inc. Each internal user is assigned a Microsoft 365 E5 license. The users at Fabrikam are not assigned any licenses.

Sub1 has an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains a RemoteApp named Appl.

You need to configure access to App1. The solution must meet the following requirements:

• The Fabrikam users must be licensed by using Per-user access pricing.

• App1 must be accessible to all the internal and Fabrikam users.

• Costs must be minimized.

What should you do first?

Options:

A.

Add a new host pool to Sub1.

B.

Assign a Microsoft 365 F3 license to each Fabrikam user.

C.

Add a new host pool to a new Azure subscription.

D.

Add the Fabrikam users to the application group that contains App1.

Question 6

You have an Azure subscription.

You need to deploy an Azure Virtual Desktop host pool that will contain 20 Windows 11 session hosts. The solution must meet the following requirements:

• Each session host must have a Windows client license applied.

• Administrative effort must be minimized.

What should you use to deploy the session hosts?

Options:

A.

Microsoft Intune

B.

the Azure portal

C.

Windows Autopilot

D.

an Azure Automation runbook

Question 7

You have a Azure Virtual Desktop deployment that contains multiple host pools.

You need to create a PowerShell script to sign users out of a specific session host before you perform a maintenance task.

Which PowerShell module should you load in the script?

Options:

A.

Az.Automation

B.

Az.COMputC

C.

Az.Maintenance

D.

Az.DektopVirtualization

Question 8

You have an Azure Virtual Desktop deployment that contains the resources shown in the following table.

You plan to enable Start VM on connect for Pool1.

You create a custom Azure role named Role1 that has sufficient permissions to start virtual machines on demand.

You need to ensure that the session hosts in Pool1 can start on demand.

To which service principal should you assign Role1?

Options:

A.

Managed1

B.

Azure Virtual Desktop

C.

Azure Automation

D.

Host1

E.

Azure Compute

Question 9

You have an Azure subscription that contains a virtual network named VNet1. a storage account named storage1, and five Azure Virtual Desktop session hosts. VNet1 and storage1 ate in the East US Azure region. The session hosts are connected to VNet1.

In storage1. you create an Azure File share named share1.

You need to ensure that the session hosts connect to share1 by using the Microsoft backbone network.

Solution: You configure network peering for VNet1.

Does this meet the goal?

Options:

A.

Yes

B.

No

Question 10

You plan to deploy Azure Virtual Desktop.

You are deploying Storage Spaces Direct to a cluster that will store FSLogix profile containers. The cluster will NOT use Cloud witness.

What is the minimum number of virtual machines required for the cluster?

Options:

A.

1

B.

2

C.

3

D.

4

Question 11

You have an Azure Virtual Desktop session host named Host1.

You need to check the status of Microsoft Defender Antivirus on Host1.

Which PowerShell cmdlet should you run?

Options:

A.

Get-KdsConfiguration

B.

Get-DscConfigurationStatus

C.

Get-MpComputerStatus

D.

Get-BCStatus

Question 12

You have an Azure Virtual Desktop deployment that contains the resources shown in the following table.

You create the resources shown in the following table.

You need to meet following requirements:

• Back up the FSLogix profile containers used by HostPool1.

• Backup the data disks in HostPool2.

To which resources can you back up the profile containers and the data disks? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Question 13

You have an Azure Virtual Desktop deployment and the Azure Storage accounts shown in the following table.

You plan to create FSLogix profile containers and store the containers in the storage accounts.

You need to identify which storage accounts support the FSlogix profile containers, and then order the accounts from highest to lowest redundancy.

Which three storage accounts should you identify in sequence? To answer, move the appropriate accounts from the list of accounts to the answer area and arrange them in the correct order.

Options:

Question 14

Your network contains an on-premises Active Directory domain and a Windows Virtual Desktop deployment.

The computer accounts for all the session hosts are in an organizational unit (OU) named WVDHostsOU. All user accounts are in an OU named CorpUsers.

A domain administrator creates a Group Policy Object (GPO) named Policy1 that only contains user settings.

The administrator links Policy1 to WVDHostsOU.

You discover that when users sign in to the session hosts, none of the settings from Policy1 are applied.

What should you configure to apply GPO settings to the users when they sign in to the session hosts?

Options:

A.

loopback processing

B.

FSLogix profiles

C.

mandatory Roaming User Profiles

D.

restricted groups

Question 15

You have an Azure Virtual Desktop host pool named Pool1 and an Azure Storage account named storage1. Pool1 and storage1 are in the same Azure region.

The current network utilization of the session hosts during peak hours is 95%.

You plan to use FSLogix profile containers stored in storage1 for users that connect to Pool1.

You need to configure the session hosts and storage1 to minimize network latency when loading and updating profiles.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Question 16

You have a Azure Virtual Desktop deployment.

You Implement FSLogix profile container.

You need to ensure that the FSlogix profile containers are not used for specific users.

What should you do?

Options:

A.

Modify the RDP Properties of the host pool.

B.

Apply an Application Masking rule to each session host.

C.

Apply an AppLocker policy to each session host.

D.

Modify the local groups on each session host.

Question 17

You have an Azure subscription that contains two users named User1 and User2 and the Microsoft Entra groups shown in the following table.

You have an Azure Virtual Desktop host pool named Pool! that contains two session hosts named Host1 and Host2. The session hosts use FSLogix user profiles.

Host1 contains the local groups shown in the following table.

Host2 contains the local groups shown in the following table.

User1 connects to Pool1 and modifies his desktop.

User1 reports that when he reconnects to Pool1, the desktop modifications fail to appear.

You need to ensure that User1 sees the modified desktop when he connects to Pool1. The solution must minimize the impact on other user profiles.

What should you do?

Options:

A.

Add User1 to both FSLogix Profile Include list groups.

B.

Remove Group3 from Group2.

C.

Remove User1 from Group3.

D.

Remove Group2 from both FSLogix Profile Exclude list groups.

Question 18

You network contains an on-premises Active Directory domain. The domain contains a universal security group named WVDusers.

You have a hybrid Azure Active Directory (Azure AD) tenant. WVDusers syncs to Azure AD.

You have a Windows Virtual Desktop host pool that contains four Windows 10 Enterprise multi-session hosts.

You need to ensure that only the members of WVDusers can establish Windows Virtual Desktop sessions to the host pool.

What should you do?

Options:

A.

Assign WVDusers to an Azure role scoped to each host pool.

B.

On each session host, add WVDusers to the local Remote Desktop Users group.

C.

Assign WVDusers to an Azure role scoped to the session hosts.

D.

Assign WVDusers to an application group.

Question 19

Your company has a main office and two branch offices. Each office connects directly to the internet. The router in each branch office is configured as an endpoint for the following VPNs:

    A VPN connection to the main office

    A site-to-site VPN to Azure

The routers in each branch office have the Quality of Service (QoS) rules shown in the following table.

Users in the branch office report slow responses and connection errors when they attempt to connect to Windows Virtual Desktop resources.

You need to modify the QoS rules on the branch office routers to improve Windows Virtual Desktop performance.

For which rule should you increase the bandwidth allocation?

Options:

A.

Rule2

B.

Rule3

C.

Rule4

D.

Rule1

Question 20

You have an Azure Virtual Desktop deployment that contains the resources shown in the following table.

You need to ensure that users can connect to a session host in the deallocated state. On which resources can you enable Start VM on Connect?

Options:

A.

Azure virtual machines

B.

P1-0 and P1-1

C.

Pool1 only

D.

Workspace1 only

Question 21

You have an Azure Virtual Desktop deployment.

You plan to create the host pools shown in the following table.

You plan to provide external users with access to the session hosts.

You need to ensure that connections to Azure Virtual Desktop are licensed by using per-user access pricing.

To which host pools will per-user access pricing apply?

Options:

A.

Pool1 only

B.

Pool4only

C.

Pool1 and Pool2 only

D.

Pool1 and Pool4 only

E.

Pool3 and Pool4 only

Question 22

You need to recommend an authentication solution that meets the performance requirements.

Which two actions should you include in the recommendation? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Options:

A.

Join all the session hosts to Azure AD.

B.

In each Azure region that will contain the Windows Virtual Desktop session hosts, create an Azure Active Directory Domain Service (Azure AD DS) managed domain.

C.

Deploy domain controllers for the on-premises Active Directory domain on Azure virtual machines.

D.

Deploy read-only domain controllers (RODCs) on Azure virtual machines.

E.

In each Azure region that will contain the Windows Virtual Desktop session hosts, create an Active Directory site.

Question 23

You need to configure a conditional access policy to meet the authentication requirements.

What should you include in the policy configuration? To answer, select the appropriate options in the answer area.

NOTE Each correct selection is worth one point.

Options:

Question 24

You need to modify the custom virtual machine images to meet the deployment requirements.

What should you install?

Options:

A.

the RSAT: Remote Desktop Services Tools optional feature

B.

the Azure Virtual Desktop Agent

C.

the Microsoft Monitoring Agent

D.

the FSLogix agent

Question 25

Which two roles should you assign to Admin2 to meet the security requirements? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Options:

A.

Desktop Virtualization Host Pool Contributor

B.

Desktop Virtualization Application Group Contributor

C.

Desktop Virtualization Workspace Contributor

D.

Desktop Virtualization Application Group Reader

E.

User Access Administrator

Question 26

You need to configure the user settings of Admin1 to meet the user profile requirements.

What should you do?

Options:

A.

Modify the membership of the FSLogix ODFC Exclude List group.

B.

Modify the membership of the FSLogix Profile Exclude List group.

C.

Modify the HKLM\SOFTWARE\FSLogix\Profiles registry settings.

D.

Modify the HKLM\SOFTWARE\FSLogix\ODFC registry settings.

Question 27

You need to implement network security to meet the security requirements and the performance requirements.

Which two actions should you perform? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

Options:

A.

Deploy two Azure Firewall instances and Azure Firewall Manager.

B.

Filter traffic by using outbound rules.

C.

Filter traffic by using infrastructure rules.

D.

Filter traffic by using inbound rules.

E.

Deploy a network security group (NSG) and two application security groups.

F.

Deploy an Azure Firewall instance and Azure Firewall Manager.

Question 28

You need to ensure the resiliency of the user profiles for the Boston office users. The solution must meet the user performance requirements.

What should you do?

Options:

A.

Modify the Account kind setting of storage1.

B.

Modify the replication settings of storage1.

C.

Implement Azure Site Recovery.

D.

Configure Cloud Cache.

Question 29

You need to recommend a DNS infrastructure that meet the performance requirements. What should you recommend? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Options:

Question 30

You need to deploy the session hosts to meet the deployment requirements Which PowerShell cmdlel should you run first?

Options:

A.

New-AzwvdRegistratrationinfo

B.

Get-AzApiManagementSsoToken

C.

Set-AzWMADDomainExtension

D.

Update-AZwvdSessionHost

Question 31

You need to ensure that you can implement user profile shares for the Boston office users. The solution must meet the user profile requirements.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Options:

Question 32

Which monitoring solution should you configure to meet the security requirements?

Options:

A.

VM insights

B.

Azure Virtual Desktop Insights

C.

Application Insights

D.

Azure Monitor activity log insights

Question 33

What should you do to ensure that the session hosts meet the application requirements for App1?

Options:

A.

Modify the Display settings for the host pool.

B.

Modify the Connection information settings for the host pool.

C.

Modify the Session behavior settings for the host pool.

D.

Assign a scaling plan to the host pool.

Question 34

You need to create a Conditional Access policy to meet the security require-ments.

How should you configure the policy? To answer, select the appropriate options in the answer area.

Options:

Question 35

Which type of host pool and load balancing algorithm should you configure to meet the performance requirements? To answer, select the appropriate options in The answer area.

NOTE: Each correct selection is worth one point.

Options:

Question 36

Which host pool design and which service should you configure to meet the disaster recovery requirements? To answer, drag the appropriate solution to the correct requirements. Each solution may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content

NOTE: Each correct selection is worth one point.

Options:

Question 37

What should you do to meet the user profile requirements?

Options:

A.

Create a new Azure Blob Storage account.

B.

Join storage1 to the AD DS domain.

C.

Create a new Azure Files share.

D.

Join storage1 to the Microsoft Entra Domain Services managed domain.

Question 38

Which settings should you configure to meet the performance requirements?

Options:

A.

Load balancing for each session host

B.

Scaling plan for the host pool

C.

Properties for each session host

D.

Properties for the host pool

Question 39

Which two actions should you perform to meet the security requirements for Defender for Endpoint? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

Options:

A.

Create an app attach image for the Azure Virtual Desktop deployment.

B.

Use a Group Policy Object (GPO) to run an onboarding script from a shared location.

C.

Add a Defender for Endpoint onboarding script to VM1 and run the script at first startup.

D.

Run a Defender for Endpoint onboarding script on VM1 before generalizing the VM1 source image.

Question 40

What should you do to meet the application requirements? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Question 41

What should you configure to meet the networking requirements?

Options:

A.

an on-premises data gateway

B.

the Networking settings for the host pool

C.

a Site-to-Site (S2S) VPN connection

D.

a Point-to-Site (P2S) VPN connection

Question 42

You need to prepare the disk on VM1 for use with the Azure Virtual Desktop deployment. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Options:

A.

Convert the disk format to VHD.

B.

Merge the disk.

C.

Convert the disk type to Fixed size.

D.

Compact the disk.

E.

Convert the disk type to Differencing.

Question 43

You need to configure the device redirection settings. The solution must meet the technical requirements.

Where should you configure the settings?

Options:

A.

Workspace1

B.

MontrealUsers

C.

Group1

D.

Pool1

Question 44

Which setting should you modify for VNET4 before you can deploy Pool4?

Options:

A.

Service endpoints

B.

Address space

C.

DNS servers

D.

Access control (IAM)

E.

Peerings

Question 45

You plan to implement the FSLogix profile containers for the Seattle office.

Which storage account should you use?

Options:

A.

storage2

B.

storage4

C.

storage3

D.

storage1

Question 46

You are planning the deployment of Pool4.

What will be the maximum number of users that can connect to Pool4, and how many session hosts are needed to support five concurrent user sessions? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Question 47

You need to evaluate the RDS deployment in the Seattle office. The solution must meet the technical requirements.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Options:

Question 48

Which role should you assign to Operator2 to meet the technical requirements?

Options:

A.

Desktop Virtualization Session Host Operator

B.

Desktop Virtualization Host Pool Contributor

C.

Desktop Virtualization User Session Operator

D.

Desktop Virtualization Contributor

Question 49

You need to configure the virtual machines that have the Pool1 prefix. The solution must meet the technical requirements.

What should you use?

Options:

A.

a Windows Virtual Desktop automation task

B.

Virtual machine auto-shutdown

C.

Service Health in Azure Monitor

D.

Azure Automation

Question 50

Which three PowerShell modules should you install on Server1 to meet the technical requirements? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Options:

A.

Pester

B.

RemoteDesktop

C.

ServerManager

D.

ActiveDirectory

E.

Hyper-V

Question 51

Which users can create Pool4, and which users can join session hosts to the domain? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Page: 1 / 13
Total 276 questions