You have an Azure subscription that contains a user named User1 and an Azure Virtual Desktop host pool named Pool1. Pool1 contains Microsoft Entra joined session hosts.
User1 has the devices shown in the following table.
You need to ensure that User1 can connect to the session hosts in Pool1 from each device. The solution must minimize administrative effort.
What should you do?
A. From the RDP Properties of Pool1, configure the Connection information settings.
B. From the RDP-Tcp Properties settings of Device3, configure Client Settings.
C. From Pool1, add a custom RDP property.
D. From the RDP-Tcp Properties settings of Device1, configure Client Settings.
Show Answer
Correct Answer: C
Explanation: Pool1 uses Microsoft Entra–joined session hosts. To allow User1 to connect from all their devices with minimal administrative effort, the required RDP behavior should be configured once at the host pool level. Adding a custom RDP property (for example, enabling connections from Entra-registered devices) applies consistently to all session hosts in Pool1, avoiding per-device or per-host configuration. Therefore, the correct action is to add a custom RDP property on Pool1.
Question 86
You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains session hosts that are deployed to a resource group named RG1 and connected to a virtual network subnet named Subnet1.
You create a virtual machine named VM1 that has the following configurations:
• Is connected to a subnet named Subnet2
• Is deployed to a resource group named RG2
• Has the FSLogix agent installed and FSLogix registry keys configured
You plan to use VM1 to create an image for deploying new session hosts.
You need to ensure that you can deploy multiple session hosts by using the gold image.
What should you do before you capture the image?
A. Delete the FSLogix registry keys from VM1.
B. Generalize VM1.
C. Connect VM1 to Subnet.
D. Uninstall the FSLogix agent from VM1.
E. Move VM1 to RG1.
Show Answer
Correct Answer: B
Explanation: Before capturing a VM as a gold image, it must be generalized (Sysprep) to remove machine-specific information such as the computer SID and hostname. This ensures the image can be used to deploy multiple session hosts without conflicts. FSLogix, networking, and resource group placement do not prevent imaging.
Question 87
Your on-premises network contains an Active Directory domain that syncs with a Microsoft Entra tenant.
You have a new Azure virtual network named VNet1.
You plan to implement an Azure Virtual Desktop host pool named Pool1. The session hosts in Pool will be joined to the Active Directory domain.
You need to recommend a networking solution for connectivity between Azure Virtual Desktop and the on-premises network.
Which three resources should you include in the recommendation? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. a public load balancer
B. a local network gateway
C. a VNet-to-VNet connection type
D. a Site-to-site (IPSec) connection type
E. a virtual network gateway
F. a public IP address for every session host
Show Answer
Correct Answer: B, D, E
Explanation: To connect Azure Virtual Desktop session hosts joined to an on‑premises Active Directory domain, you need site‑to‑site VPN connectivity. A virtual network gateway provides the Azure VPN endpoint, a local network gateway represents the on‑premises network, and a site‑to‑site (IPsec) connection securely links them. Other options listed are not required for on‑premises connectivity.
Question 88
You have an Azure Virtual Desktop deployment that contains a host pool.
The host pool contains 100 session hosts that run Windows 10 on general-purpose virtual machines.
You plan to implement Quality of Service (QoS) for the deployment.
What should you do first?
A. Configure a scaling plan.
B. Switch to a high-performance computing (HPC) virtual machine.
C. Implement RDP Shortpath.
D. Upgrade all the session hosts to Windows 11.
Show Answer
Correct Answer: C
Explanation: To implement Quality of Service (QoS) for Azure Virtual Desktop, the first required step is to enable RDP Shortpath. QoS relies on being able to classify and prioritize UDP-based RDP traffic, which is only possible when RDP Shortpath provides a direct client-to-session-host connection. Other options like scaling plans, VM size changes, or OS upgrades do not enable or configure network-level traffic prioritization and therefore are not prerequisites for QoS.
Question 89
HOTSPOT
-
You are planning an Azure Virtual Desktop deployment that must support both internal and external users.
You need to recommend how many Azure subscriptions to add to the deployment, and what to assign to each type of user. The solution must minimize costs.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Number of subscriptions:
2
Internal users:
A Microsoft 365 E5 license
External users:
Per-user access pricing
Explanation: To minimize costs, internal users should use eligible Microsoft 365 licenses, while external users require per-user access pricing. Using two subscriptions prevents internal users from being billed per-user access pricing in addition to their licenses, which would increase costs.
Question 90
You have a Microsoft Entra tenant named contoso.com and an Azure Virtual Desktop deployment.
You have a RemoteApp app group named RemoteApp1.
You have a partner company named Fabrikam, Inc. that has 200 users. The users require access to RemoteApp1.
You need to identify which type of pricing is associated with providing RemoteApp1 access to the Fabrikam users.
What should you identify?
A. compute only
B. compute, storage, and networking only
C. Azure Virtual Desktop per-user access and compute only
D. Azure Virtual Desktop per-user access only
E. Azure Virtual Desktop per-user access, compute, storage, and networking
Show Answer
Correct Answer: E
Explanation: Azure Virtual Desktop charges always include the underlying Azure infrastructure costs (compute, storage, and networking). In addition, external users from a partner tenant (Fabrikam) require Azure Virtual Desktop per-user access pricing. Therefore, providing RemoteApp access to Fabrikam users incurs per-user access charges plus compute, storage, and networking costs.
Question 92
You have a Microsoft Entra hybrid tenant that contains the users shown in the following table.
You deploy Microsoft Entra joined Azure Virtual Desktop session hosts.
Which users support the use of FSLogix application rule sets?
A. User1 only
B. User2 only
C. User1 and User2 only.
D. User1 and User3 only
E. User1, User2, and User3
Show Answer
Correct Answer: B
Explanation: FSLogix application rule sets require users and groups to be synchronized from on‑premises Active Directory so they have traditional AD SIDs that can be resolved by a domain controller. Microsoft Entra ID cloud‑only users and guest users are not supported. Among the users listed, only User2 is AD‑synced, so only User2 supports FSLogix application rule sets.
Question 93
HOTSPOT
-
You have a Microsoft Entra tenant named contoso.com that contains cloud-only user accounts.
You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains session hosts that are joined to contoso.com.
You plan to use FSLogix profile containers to manage user profiles.
You need to configure storage for the FSLogix solution.
Which type of storage should you use for the profile containers, and which FSLogix registry key should you configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Explanation: FSLogix profile containers for Azure Virtual Desktop are supported on SMB-based storage. Azure file shares are the standard, supported, and cost-effective choice for cloud-only Entra ID–joined session hosts. When not using FSLogix Cloud Cache, profile container paths are configured using the VHDLocations registry key.
Question 94
You have an Azure Virtual Desktop deployment that contains five session hosts.
You have users that work from offices in Seattle and Vancouver. The users connect to the session hosts over the internet.
You need to ensure that the users can connect to the session hosts from only the Seattle and Vancouver offices.
What should you use?
A. Conditional Access
B. RDP Shortpath
C. a network security group (NSG)
D. Azure Firewall
Show Answer
Correct Answer: A
Explanation: Azure Virtual Desktop user connections are authenticated through Microsoft Entra ID (Azure AD). To restrict access based on where users are connecting from (Seattle and Vancouver offices), you should use Conditional Access with named locations or IP ranges. Network Security Groups or Azure Firewall control network traffic to the VMs, but AVD session hosts are not directly exposed to the internet for user access, so NSGs/firewalls cannot reliably enforce user location restrictions. RDP Shortpath is for optimizing connectivity, not access control.
Question 95
You have an Azure Virtual Desktop deployment that contains a host pool named Pool1.
Pool1 contains 10 session hosts.
You need to enable screen capture protection on all the session hosts in Pool1. The solution must minimize administrative effort.
What should you do?
A. From RDP Properties for Pool1, configure the Session behavior settings.
B. On each session host, configure a local Group Policy setting.
C. To each session host, add an extension.
D. From RDP Properties for Pool1, configure the Display settings.
Show Answer
Correct Answer: B
Explanation: Azure Virtual Desktop screen capture protection is configured at the operating system level, not through host pool RDP properties or extensions. Microsoft supports enabling it via Group Policy (or Intune) on the session hosts. Therefore, configuring a Group Policy setting on the session hosts is the correct approach among the options provided.
$19
Get all 321 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
