HOTSPOT
-
You are planning an Azure Virtual Desktop deployment that must support both internal and external users.
You need to recommend how many Azure subscriptions to add to the deployment, and what to assign to each type of user. The solution must minimize costs.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Number of subscriptions: 2
Internal users: A Microsoft 365 E5 license
External users: Per-user access pricing
Explanation: Internal users should use eligible Microsoft licensing, while external users should use Azure Virtual Desktop per-user access pricing. Microsoft recommends a separate subscription for per-user access pricing to avoid effectively paying twice for internal users.
Question 97
You have a Microsoft Entra tenant named contoso.com and an Azure Virtual Desktop deployment.
You have a RemoteApp app group named RemoteApp1.
You have a partner company named Fabrikam, Inc. that has 200 users. The users require access to RemoteApp1.
You need to identify which type of pricing is associated with providing RemoteApp1 access to the Fabrikam users.
What should you identify?
A. compute only
B. compute, storage, and networking only
C. Azure Virtual Desktop per-user access and compute only
D. Azure Virtual Desktop per-user access only
E. Azure Virtual Desktop per-user access, compute, storage, and networking
Show Answer
Correct Answer: E
Explanation: Because the users are external partner users, Azure Virtual Desktop per-user access pricing applies. In addition to the per-user access charge, you still pay the underlying Azure infrastructure costs required to deliver the RemoteApp, including compute (VMs), storage, and networking. Therefore all listed cost categories apply.
Question 98
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Virtual Desktop host pool that runs Windows 10 Enterprise multi-session.
User sessions are load-balanced between the session hosts. Idle session timeout is 30 minutes.
You plan to shut down a session host named Host1 to perform routine maintenance.
You need to prevent new user sessions to Host1 without disconnecting active user sessions.
Solution: From the Azure portal, add lock on Host1.
Does this meet the goal?
A. Yes
B. No
Show Answer
Correct Answer: B
Explanation: Adding a resource lock in Azure prevents management operations such as deletion or modification of the resource. It does not affect Azure Virtual Desktop session routing or prevent new user connections. To stop new sessions while allowing existing sessions to continue, the session host should be placed in drain mode (allow new sessions = No).
Question 99
You have a Microsoft Entra hybrid tenant that contains the users shown in the following table.
You deploy Microsoft Entra joined Azure Virtual Desktop session hosts.
Which users support the use of FSLogix application rule sets?
A. User1 only
B. User2 only
C. User1 and User2 only.
D. User1 and User3 only
E. User1, User2, and User3
Show Answer
Correct Answer: B
Explanation: FSLogix Apps Rule Set assignments require traditional Active Directory SIDs. Microsoft Entra cloud-only users and guest users are not supported for rule set assignments. Only users synchronized from on-premises Active Directory can be targeted, and the session hosts must have line-of-sight to a domain controller to resolve SIDs.
Question 100
HOTSPOT
-
You have a Microsoft Entra tenant named contoso.com that contains cloud-only user accounts.
You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains session hosts that are joined to contoso.com.
You plan to use FSLogix profile containers to manage user profiles.
You need to configure storage for the FSLogix solution.
Which type of storage should you use for the profile containers, and which FSLogix registry key should you configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Explanation: For Microsoft Entra cloud-only users with Entra-joined Azure Virtual Desktop session hosts, Azure Files supports Entra Kerberos authentication for FSLogix profile containers. Standard FSLogix profile containers use the VHDLocations registry value; CCDLocations is for Cloud Cache deployments.
Question 101
You have an Azure Virtual Desktop deployment that contains five session hosts.
You have users that work from offices in Seattle and Vancouver. The users connect to the session hosts over the internet.
You need to ensure that the users can connect to the session hosts from only the Seattle and Vancouver offices.
What should you use?
A. Conditional Access
B. RDP Shortpath
C. a network security group (NSG)
D. Azure Firewall
Show Answer
Correct Answer: A
Explanation: Conditional Access can restrict Azure Virtual Desktop sign-ins based on named network locations (such as the public IP addresses of the Seattle and Vancouver offices). NSGs filter traffic to Azure resources, but Azure Virtual Desktop session hosts are not intended to be protected by restricting end-user RDP access with NSGs because user connections are brokered through the AVD service. RDP Shortpath is a transport optimization, and Azure Firewall is not the appropriate identity-based access control for limiting user sign-in locations.
Question 102
You have an Azure Virtual Desktop deployment that contains a host pool named Pool1.
Pool1 contains 10 session hosts.
You need to enable screen capture protection on all the session hosts in Pool1. The solution must minimize administrative effort.
What should you do?
A. From RDP Properties for Pool1, configure the Session behavior settings.
B. On each session host, configure a local Group Policy setting.
C. To each session host, add an extension.
D. From RDP Properties for Pool1, configure the Display settings.
Show Answer
Correct Answer: B
Explanation: Screen capture protection for Azure Virtual Desktop is enabled through the Windows operating system using Group Policy or Microsoft Intune, not through Azure Virtual Desktop host pool RDP properties or VM extensions. Given the available options, configuring the policy on the session hosts via Group Policy is the correct approach. Although local Group Policy would require per-host configuration in practice, the exam distinguishes the feature's configuration mechanism rather than domain GPO management.
Question 103
HOTSPOT
-
You have an Azure Virtual Desktop deployment.
You have a Microsoft Entra tenant that contains the users shown in the following table.
The users have smart devices that have the Microsoft Authenticator app installed.
You create a Conditional Access policy that has the following settings:
• Name: CAPolicy1
• Assignments
o Users or workload identities: Group1
o Target resources: All cloud apps
o Access controls
- Grant access: Require multi-factor authentication
o Enable policy: On
You configure the Microsoft Authenticator settings as shown in the following exhibit.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Yes
No
Yes
Explanation: Number matching is used with Microsoft Authenticator push notifications. Group1 is configured for Push, while Group2 is configured for Passwordless. The Conditional Access policy requiring MFA applies only to Group1 members. User1 (Group1) and User3 (Group1 and Group2) can satisfy MFA with Authenticator push using number matching. User2 is not targeted by the Conditional Access policy.
Question 104
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Virtual Desktop deployment.
You need to ensure that users are signed out automatically when they disconnect from a session.
Solution: From the Local Group Policy Editor, you configure the Connections settings.
Does this meet the goal?
A. Yes
B. No
Show Answer
Correct Answer: B
Explanation: The goal is to automatically sign out users after they disconnect from an Azure Virtual Desktop session. This is configured through Session Time Limits policies (such as setting a time limit for disconnected sessions and ending the session when the time limit is reached), not the Connections policy settings. Therefore, configuring the Connections settings alone does not meet the goal.
Question 105
You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. All the session hosts in Pool are Microsoft Entra joined.
You have 50 users that will access the deployment by using devices that run Linux.
You need to ensure that the users can sign in to the deployment.
Which custom RDP property should you configure?
A. Targetisaadjoined
B. Enablecredsspsupport
C. securitymode
D. authentication level
Show Answer
Correct Answer: A
Explanation: The correct custom RDP property is targetisaadjoined. This property tells the Remote Desktop client that the destination session host is Microsoft Entra joined, enabling authentication scenarios required for Microsoft Entra joined Azure Virtual Desktop session hosts from supported non-Windows clients such as Linux. The other properties relate to CredSSP, security mode, or authentication level and do not enable Microsoft Entra joined sign-in.
$19
Get all 320 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
