You have an Azure Virtual Desktop deployment that contains a host pool named Pool1.
You plan to create a Windows 10 image named Image1 to deploy new session hosts to Pool1.
You need to ensure that all the new session hosts deployed by using Image1 are onboarded to Microsoft Defender for Endpoint.
What should you do?
A. Run a Defender for Endpoint onboarding script on Image1, and then run sysprep.
B. Add a Defender for Endpoint onboarding script to image1, and then run the script at first start.
C. Create an MSIX package for Pool1.
D. Create an automation task for Pool1.
Show Answer
Correct Answer: B
Explanation: For Azure Virtual Desktop (multi-session Windows 10/11), Microsoft Defender for Endpoint must be onboarded after the VM has a unique machine identity. Running the onboarding script before Sysprep is not supported because Sysprep resets identifiers required by Defender, which would break onboarding for cloned hosts. Microsoft recommends placing the onboarding script in the golden image and configuring it to run at first boot of each new session host. Therefore, adding the onboarding script to Image1 and running it at first start is the correct approach.
Question 117
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Virtual Desktop deployment.
You need to ensure that users are signed out automatically when they disconnect from a session.
Solution: From the Local Group Policy Editor, you configure the Session Time Limits settings.
Does this meet the goal?
A. Yes
B. No
Show Answer
Correct Answer: A
Explanation: Yes. Configuring Session Time Limits in the Local Group Policy Editor (Remote Desktop Session Host > Session Time Limits) allows you to set a policy such as 'Set time limit for disconnected sessions,' which will automatically sign out users after they disconnect, meeting the requirement.
Question 118
You have an on-premises Active Directory Domain Services (AD DS) domain named contoso.com that syncs with an Azure AD tenant.
You have an Azure subscription that is linked to the Azure AD tenant. The subscription contains a user named User1 that has the following properties:
• User logon name:
• SID: S-1-5-21-4534338-1127018997-2609994386-5108
• User logon name (pre-Windows 2000): CONTOSO\User1
The subscription contains an Azure Virtual Desktop deployment. The deployment contains a domain-joined session host named Host1 and an Azure file share.
You need to configure per-user FSLogix profile settings for Host1.
How should you reference User1 in the FSLogix registry configuration?
A. [email protected]
B. CONTOSO\User1
C. User1
D. S-1-5-21-4534338-1127018997-2609994386-5108
Show Answer
Correct Answer: D
Explanation: FSLogix per-user profile settings in the registry must reference users by their Security Identifier (SID). The SID is unique and immutable, ensuring the settings apply to the correct user regardless of username or UPN changes. Therefore, User1 should be referenced by SID S-1-5-21-4534338-1127018997-2609994386-5108.
Question 119
You have an Azure Virtual Desktop deployment that contains the host pools shown in the following table.
VNet1, VNet2, and VNet3 are peered.
You plan to use Azure Bastion to provide secure administrative access to all the session hosts. The solution must minimize costs.
How many Azure Bastion hosts should you deploy?
A. 1
B. 2
C. 3
D. 4
Show Answer
Correct Answer: A
Explanation: Azure Bastion can provide RDP/SSH access to virtual machines across peered virtual networks (both regional and global peering). Since VNet1, VNet2, and VNet3 are peered, a single Bastion host deployed in one VNet can securely access session hosts in all three. Deploying one Bastion minimizes cost.
Question 120
You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains two session hosts.
You build a custom virtual machine named Server2 that runs Windows Server.
You need to add Server2 to Pool1.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Install the Remote Desktop Connection Broker role.
B. Install the Azure Connected Machine agent.
C. Run the New-AzWvdHostPool cmdlet.
D. Provide a registration token.
E. Install the Remote Desktop Services Infrastructure Agent.
Show Answer
Correct Answer: D, E
Explanation: To add an existing/custom Windows Server VM as a session host to an Azure Virtual Desktop host pool, you must register it with the host pool. This requires providing a registration token generated for the host pool and installing the Remote Desktop Services Infrastructure (AVD) Agent on the VM. The agent uses the token to register the session host with Pool1. Other options relate to creating host pools, legacy RDS roles, or Azure Arc scenarios and are not required here.
Question 122
HOTSPOT
-
You have an Azure Virtual Desktop deployment that contains a host pool named pool1.
Pool1 contains two session hosts.
You need to ensure that users can use Microsoft OneDrive from a RemoteApp.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Install OneDrive on the:
Client device only
Configure a registry value on the:
Session hosts only
Explanation: For Azure Virtual Desktop RemoteApp, OneDrive runs on the local client. Session hosts only require a registry setting to enable OneDrive redirection/integration for RemoteApp; OneDrive itself is not installed on the hosts.
Question 123
DRAG DROP
-
You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains the session hosts shown in the following table.
You have two internal users named User1 and User2.
You plan to enable the following connectivity for the Azure Virtual Desktop deployment:
• User1 will connect to Host1.
• User2 will connect to Host2.
Which license should you recommend for each user? To answer, drag the appropriate licenses to the correct users. Each license may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Explanation: Windows 11 Enterprise multi-session requires an eligible Microsoft 365/Windows license for internal users. Windows Server session hosts require an RDS CAL. Per-user access pricing applies to external users, not internal ones.
Question 124
DRAG DROP
-
You have an Azure subscription that contains an Azure Virtual Desktop deployment.
You create the following storage account:
• Name: storage1
• Access key: key1
• Subscription ID: SubID1
• Azure file share: share1
• Shared access signature (SAS): SAS1
You plan to store Azure Virtual Desktop user profiles in storage1 and configure directory-level and file-level permissions for share1.
You need to connect to share1 by using drive letter F.
How should you complete the command? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: storage1
key1
Explanation: Mapping an Azure Files share for setting NTFS permissions uses the storage account name as the Azure user and the storage account access key as the password (not the SAS). Thus, /user:Azure\storage1 with key1.
Question 125
You have an Azure subscription that contains an Azure Virtual Desktop deployment and the storage accounts shown in the following table.
You plan to deploy a host pool named Pool1 to the East US Azure region. Pool1 will use FSLogix Profile Containers and Office Containers.
Which storage accounts can Pool1 use?
A. storage2 only
B. storage1 and storage2 only
C. storage1, storage2, and storage3 only
D. storage1, storage2, and storage4 only
E. storage1, storage2, storage3, and storage4
Show Answer
Correct Answer: B
Explanation: FSLogix Profile Containers and Office Containers require SMB-based storage such as Azure Files. storage1 (StorageV2) and storage2 (FileStorage) both support Azure Files and are located in the same region (East US) as the Azure Virtual Desktop host pool, which is a requirement for supported and optimal deployments. storage3 does not support SMB, and storage4, while SMB-capable, is in a different region and is not supported for an East US host pool.
Question 126
HOTSPOT
-
You have an Azure Virtual Desktop deployment that contains a host pool named Pool1.
You plan to enable Scheduled agent updates for Pool1.
You need to identify how scheduled agent updates will be applied.
What is the maximum number of maintenance windows you can specify, and what is the maximum number of retries for failed scheduled agent updates? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Maximum number of maintenance windows: 2
Maximum number of retries: 4
Explanation: Azure Virtual Desktop scheduled agent updates allow configuring up to two maintenance windows per host pool. If an update fails, the service retries the update up to four times during the defined maintenance windows before forcing the update to ensure agents stay current.
$19
Get all 321 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
