Microsoft

AZ-140 Free Practice Questions — Page 12

Question 106

You have an Azure subscription that is linked to a hybrid Microsoft Entra tenant. You have an Azure Virtual Desktop deployment that contains the host pools shown in the following table. All the session hosts are Microsoft Entra joined. You plan to implement FSLogix profile containers and store them on an Azure Files share named share1. Which host pools contain session hosts that can access the FSLogix profile containers on share1?

A. Pool1 only
B. Pool1 and Pool2 only
C. Pool1 and Pool3 only
D. Pool1, Pool2, and Pool3 only
E. Pool1, Pool2, Pool3, and Pool4
Show Answer
Correct Answer: E
Explanation:
FSLogix profile containers are supported on Microsoft Entra–joined Azure Virtual Desktop session hosts running Windows 10 Enterprise multi-session, Windows 11 Enterprise, Windows Server 2019 Datacenter, and Windows Server 2022 Datacenter. All host pools (Pool1–Pool4) use supported operating systems, so their session hosts can access the FSLogix profile containers on the Azure Files share.

Question 107

DRAG DROP - You have an Azure subscription that contains an Azure Virtual Desktop deployment and a storage account named storage1. Storage1 contains an Azure Files share named share1. The Azure Virtual Desktop deployment contains a host pool named Pool1. Pool1 contains two session hosts that are joined to a Microsoft Entra Domain Services domain. You need to configure FSLogix profile containers and store them on share1. Which actions should you perform in sequence? To answer, drag the appropriate actions to the correct order. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Illustration for AZ-140 question 107
Show Answer
Correct Answer: Step 1: Enable the Microsoft Entra Domain Services identity source for share1. Step 2: Assign the Storage File Data SMB Share Contributor role to users and grant permissions. Step 3: Set registry keys on the session hosts to use Profile Containers.
Explanation:
FSLogix profile containers on Azure Files with Microsoft Entra Domain Services require enabling the AAD DS identity source on the file share first. Users must then be granted SMB share permissions via the appropriate RBAC role. Finally, FSLogix must be configured on the session hosts through registry settings to use the profile container location.

Question 108

HOTSPOT - You have an Azure subscription named Sub1 that contains a resource group named RG1. RG1 contains an Azure Virtual Desktop deployment. The deployment has a host pool named Pool that contains four session hosts. You plan to enable the Start VM On Connect feature. Which role should you assign to the Azure Virtual Desktop service principal, and to which scope should you assign the role? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Illustration for AZ-140 question 108
Show Answer
Correct Answer: Role: Desktop Virtualization Power On Contributor Scope: Sub1
Explanation:
Start VM On Connect requires the Azure Virtual Desktop service principal to have permission to power on virtual machines. The built-in Desktop Virtualization Power On Contributor role provides this capability, and assigning it at the subscription (Sub1) scope ensures it applies to all session host VMs in the host pool.

Question 109

HOTSPOT - You have an Azure subscription named Sub1 that contains a resource group named RG1. RG1 contains an Azure Virtual Desktop deployment. The deployment contains a host pool named Pool1. You plan to configure Pool1 to meet the following requirements: • Session hosts must start automatically as user demand increases. • Azure Virtual Desktop must have permission to turn on session host virtual machines. What should you configure, and which role should you assign to the Azure Virtual Desktop service principal? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Illustration for AZ-140 question 109
Show Answer
Correct Answer: Configure: A scaling plan Assign: Desktop Virtualization Power On Contributor for Sub1
Explanation:
Automatic startup of session hosts based on user demand is provided by an Azure Virtual Desktop scaling plan. To allow Azure Virtual Desktop to start session host VMs, the service principal must be granted the Desktop Virtualization Power On Contributor role at the subscription scope, which is required for Start VM on Connect and scaling operations to function correctly.

Question 110

You have an Azure Virtual Desktop host pool named Pool1. All the session hosts in Pool1 are assigned private IP addresses only. You need to ensure that administrators can connect remotely to the session hosts. The solution must ensure that the administrators can connect to the session hosts by using Azure Command-Line Interface (CLI) and the Remote Desktop client for Windows. What should you include in the solution?

A. Azure Application Gateway WAF_v2
B. Azure Front Door Standard
C. Azure Bastion Standard
D. Azure Application Gateway Standard_v2
Show Answer
Correct Answer: C
Explanation:
All session hosts have only private IP addresses, so administrators need a secure way to access them without exposing public endpoints. Azure Bastion Standard provides secure RDP access to virtual machines over SSL through the Azure portal and supports connectivity that can be initiated using Azure CLI and the Remote Desktop client. Application Gateway and Front Door are for HTTP/HTTPS traffic, not administrative RDP access.

Question 111

You have an Azure subscription that contains an Azure Virtual Desktop deployment. The deployment contains a host pool named Pool. Users access the deployment by using the Windows client for Azure Virtual Desktop. You need to ensure that the users must reauthenticate every eight hours. The solution must minimize administrative effort. What should you do?

A. From the Microsoft Entra admin center, create a Conditional Access policy.
B. From the Microsoft Entra admin center, configure the User settings.
C. Define Pool1 as a validation environment.
D. For each session host, configure just-in-time (JIT) VM access.
Show Answer
Correct Answer: A
Explanation:
Azure Virtual Desktop authentication is controlled by Microsoft Entra ID. To force users to reauthenticate on a fixed interval, you configure a Conditional Access policy with a sign-in frequency (eight hours). This applies centrally to all users and clients and requires minimal ongoing administration. User settings do not provide sign-in frequency control, validation environments are unrelated, and JIT VM access affects management access to VMs, not user authentication.

Question 112

You have an Azure Virtual Desktop deployment. You plan to create the host pools shown in the following table. You plan to provide external users with access to the session hosts. You need to ensure that connections to Azure Virtual Desktop are licensed by using per-user access pricing. To which host pools will per-user access pricing apply?

A. Pool1 only
B. Pool4 only
C. Pool1 and Pool2 only
D. Pool1 and Pool4 only
E. Pool3 and Pool4 only
Show Answer
Correct Answer: C
Explanation:
Per-user access pricing for Azure Virtual Desktop applies only to Windows 10/11 Enterprise multi-session host pools and does not apply to Windows Server–based host pools. Therefore, only the host pools using Windows 10/11 multi-session (Pool1 and Pool2) are eligible.

Question 113

DRAG DROP - Your network contains an Active Directory Domain Services (AD DS) domain named Domain1. You have an Azure subscription named Sub1. Sub1 contains a storage account named storage1 that has a file share named share1. Sub1 has an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains session hosts that are joined to Domain1. You plan to use share1 to store FSLogix user profiles. You need to enable support for FSLogix. What should you do for storage1 and share1? To answer, drag the appropriate configurations to the correct resources. Each configuration may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Illustration for AZ-140 question 113
Show Answer
Correct Answer: storage1: Join to Domain1. share1: Grant NTFS permission.
Explanation:
FSLogix on Azure Files with AD DS requires the storage account to be domain-joined for Kerberos authentication. Access to the file share is then controlled using NTFS permissions on the share for users and groups that store profiles.

Question 114

You have an Azure Virtual Desktop deployment that contains two host pools named Pooll and Pool2. Pool1 contains 10 session hosts and supports 100 concurrent users. Pool2 contains two session hosts and supports 20 concurrent users. You need to recommend an Azure Virtual Desktop update solution that meets the following requirements: • All service updates must be tested before reaching general availability. • Testing must have a minimal impact on the organization. • No new host pools can be created. What should you include in the recommendation?

A. From the properties of Pool1, enable the validation environment.
B. From the properties of Pool2, enable the validation environment.
C. From the properties of Pool1, assign a scaling plan.
D. From the properties of Pool2, assign a scaling plan.
Show Answer
Correct Answer: B
Explanation:
Azure Virtual Desktop validation environments allow service updates to be received and tested before general availability. To minimize organizational impact and without creating new host pools, the validation environment should be enabled on the smaller host pool. Pool2 supports fewer users (20 vs. 100), so testing updates there limits risk and impact while still validating updates before GA.

Question 115

HOTSPOT - You have a Microsoft Entra tenant that is linked to an Azure subscription. The tenant contains the identities shown in the following table. You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains a session host named Host1. You create the application group shown in the following table. You configure app attach as shown in the following table. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Illustration for AZ-140 question 115 Illustration for AZ-140 question 115 Illustration for AZ-140 question 115 Illustration for AZ-140 question 115
Show Answer
Correct Answer: User1: No User2: No User3: Yes
Explanation:
Access requires assignment to both the Desktop application group and the App Attach package, and nested groups are not evaluated. User1 is only indirectly related via Group1 and not assigned to the desktop app group. User2 is assigned via Group2 to the desktop app group, but app attach assignment uses Group1 and does not honor nested membership. User3 is directly assigned to both the desktop app group and the app attach package, so access is granted.

$19

Get all 321 questions with detailed answers and explanations

  • Instant download HTML + PDF delivered the moment payment clears.
  • Secure Stripe checkout we never see or store your card details.
  • 7-day refund if files are defective see our refund policy.