HOTSPOT
-
You have an Azure Virtual Desktop deployment.
You have a Microsoft Entra tenant that contains the users shown in the following table.
The users have smart devices that have the Microsoft Authenticator app installed.
You create a Conditional Access policy that has the following settings:
• Name: CAPolicy1
• Assignments
o Users or workload identities: Group1
o Target resources: All cloud apps
o Access controls
- Grant access: Require multi-factor authentication
o Enable policy: On
You configure the Microsoft Authenticator settings as shown in the following exhibit.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: User1: Yes
User2: No
User3: Yes
Explanation: The Conditional Access policy applies only to Group1. Microsoft Authenticator number matching is available for users targeted for push-based MFA. User1 and User3 are members of Group1, so they can use number matching. User2 is not in Group1, so the policy (and number matching requirement) does not apply.
Question 97
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Virtual Desktop deployment.
You need to ensure that users are signed out automatically when they disconnect from a session.
Solution: From the Local Group Policy Editor, you configure the Connections settings.
Does this meet the goal?
A. Yes
B. No
Show Answer
Correct Answer: B
Explanation: Configuring the Connections settings in the Local Group Policy Editor does not control automatic sign-out of disconnected sessions. Automatic sign-out requires configuring Session Time Limits (for example, setting a time limit for disconnected sessions). Therefore, this solution does not meet the goal.
Question 98
You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. All the session hosts in Pool are Microsoft Entra joined.
You have 50 users that will access the deployment by using devices that run Linux.
You need to ensure that the users can sign in to the deployment.
Which custom RDP property should you configure?
A. Targetisaadjoined
B. Enablecredsspsupport
C. securitymode
D. authentication level
Show Answer
Correct Answer: A
Explanation: Linux clients use the Remote Desktop client that authenticates with username and password and do not support Microsoft Entra (Azure AD) authentication flows used by Windows clients. When session hosts are Microsoft Entra joined, you must set the custom RDP property `targetisaadjoined:i:1` so the service allows connections to Entra-joined hosts using standard credentials from non-Windows clients. The other options do not enable Entra-joined host targeting for Linux devices.
Question 99
You have an Azure subscription that contains an eight-node Storage Spaces Direct cluster named cluster1 and an Azure Virtual Desktop host pool named Pool1. The session hosts in Pool store FSLogix user profiles in cluster1.
You are evaluating the availability of the user profiles in Pool1.
What is the maximum number of nodes that can fail at the same time without users losing access to their user profiles?
A. 2
B. 3
C. 4
D. 5
Show Answer
Correct Answer: A
Explanation: An eight-node Storage Spaces Direct cluster uses three-way mirror resiliency by default. Three-way mirroring keeps three copies of data on different nodes and can tolerate the failure of up to two nodes simultaneously. If three or more nodes fail, at least one copy of the data may be unavailable, causing FSLogix user profiles to become inaccessible.
Question 100
You have an Azure Virtual Desktop session host named Host1.
You need to check the status of Microsoft Defender Antivirus on Host1.
Which PowerShell cmdlet should you run?
A. Get-DscConfigurationStatus
B. Get-MpComputerstatus
C. Get-KdsConfiguration
D. Get-BCStatus
Show Answer
Correct Answer: B
Explanation: Get-MpComputerStatus is the PowerShell cmdlet used to retrieve the current status of Microsoft Defender Antivirus, including real-time protection, signature versions, and scan information. The other cmdlets are unrelated to Defender Antivirus status.
Question 101
You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains three session hosts.
You need to implement a private endpoint connection for Pool.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Create a private endpoint by using the global target sub-resource.
B. Reregister the Microsoft.VirtualMachineImages resource provider for the Azure subscription.
C. Reregister the Microsoft.DesktopVirtualization resource provider for the Azure subscription.
D. Create a private endpoint by using the connection target sub-resource.
E. Create a private endpoint by using the feed target sub-resource.
Show Answer
Correct Answer: C, D
Explanation: To use Private Link with an Azure Virtual Desktop host pool, the Microsoft.DesktopVirtualization resource provider must be registered to enable AVD features, including private endpoints. For host pools specifically, the required private endpoint target sub-resource is **connection**, which handles session brokering traffic. The **feed** sub-resource is used for workspaces, not host pools.
Question 102
You have an Azure Virtual Desktop host pool that uses FSLogix user profiles. The user profiles are stored in an Azure Files share named share1.
You need to back up share1 by using Azure Backup.
What should you create first? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
A. an Azure Storage account
B. an Azure Files share
C. an Azure Backup vault
D. an Azure Recovery Services vault
Show Answer
Correct Answer: D
Explanation: To back up an existing Azure Files share by using Azure Backup, the first required resource is an Azure Recovery Services vault. The vault is used to configure backup policies and manage recovery points for Azure Files. The storage account and file share already exist because share1 is in use, so they do not need to be created first.
Question 103
HOTSPOT
-
You have an Azure subscription that includes the identities shown in the following table.
You need to ensure that you can create golden images by using the Azure Image Builder from the Azure portal.
Which Azure service should you use and which identity should the service use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Explanation: Azure Image Builder in the Azure portal uses Image templates to define and build golden images. The service requires an identity to access Azure resources during the build process, and a managed identity is the supported and recommended option for Azure Image Builder.
Question 104
You have an Azure Virtual Desktop deployment that contains a pooled host pool named Pool1. Pool1 contains five session hosts.
You plan to deploy two apps named App1 and App2. The solution must meet the following requirements:
• All the session hosts must contain both apps.
• All users must connect to a full desktop session.
• Only users in the sales department must be able to use App1.
• Only users in the research department must be able to use App2.
You need to ensure that the users in each department can see only their assigned app when they connect to Pool1.
What should you use?
A. FSLogix application masking
B. MSIX app attach
C. RemoteApp application groups
D. RemoteApp streaming
Show Answer
Correct Answer: A
Explanation: All users must connect to a full desktop session, not RemoteApps, and both applications must be installed on all session hosts. The requirement is to control which applications are visible/usable per department. FSLogix application masking hides or reveals installed applications based on user or group membership while still delivering a full desktop. MSIX app attach is for app delivery, not user-based visibility control, and RemoteApp options conflict with the full desktop requirement.
Question 105
HOTSPOT
-
You have an Azure Virtual Desktop host pool named Pool1.
You have an Azure Compute Gallery that contains an image. The image contains the resources shown in the following table.
Pool1 contains a single session host named SH1.
You need to deploy a new session host named SH2 that will be used to perform troubleshooting. The solution must meet the following requirements:
• SH2 must use image version 0.0.1.
• Administrative effort must be minimized.
Which two actions should you perform in order? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: First action:
For image version 0.0.2, set Exclude from latest to Yes.
Second action:
From Pool1, deploy a new session host.
Explanation: By excluding image version 0.0.2 from being the latest, image version 0.0.1 becomes the default image in the Azure Compute Gallery. Deploying a new session host directly from the existing Azure Virtual Desktop host pool then automatically uses version 0.0.1 and installs the required AVD components, minimizing administrative effort.
$19
Get all 321 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
