Microsoft

AZ-140 Free Practice Questions — Page 14

Question 138

You have an Azure subscription named Sub1 and a Microsoft 365 E5 subscription. The tenant contains user accounts for all internal users and users from a partner company named Fabrikam, Inc. Each internal user is assigned a Microsoft 365 E5 license. The users at Fabrikam are not assigned any licenses. Sub1 has an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains a RemoteApp named App1. You need to configure access to App1. The solution must meet the following requirements: • The Fabrikam users must be licensed by using Per-user access pricing. • App1 must be accessible to all the internal and Fabrikam users. • Costs must be minimized. What should you do first?

A. Add the Fabrikam users to the application group that contains App1.
B. Add a new host pool to Sub1.
C. Assign a Microsoft 365 F3 license to each Fabrikam user.
D. Add a new host pool to a new subscription.
Show Answer
Correct Answer: D
Explanation:
Per-user access pricing for Azure Virtual Desktop is enabled at the Azure subscription level. Because the existing subscription serves internal users who already have Microsoft 365 E5 licenses, Microsoft recommends using a separate subscription enrolled in per-user access pricing to avoid paying twice for licensed internal users. To provide the external users through that subscription, you would first create a new host pool there. Sources: https://learn.microsoft.com/en-us/azure/virtual-desktop/licensing

Question 139

You have an Azure Virtual Desktop deployment. You need to add a new application for a RemoteApp application group. The application must be available only during a user session. What should you use as an application source?

A. FSLogix Profile Container
B. file path
C. start menu
D. app attach
Show Answer
Correct Answer: D
Explanation:
The requirement that the application be available only during a user session aligns with Azure Virtual Desktop app attach (MSIX app attach), which dynamically mounts and delivers applications into the user session without permanently installing them on the session host. File path and Start menu are application discovery sources for already available applications, not dynamic session-only delivery. FSLogix Profile Container manages user profiles, not application publishing.

Question 141

You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains two session hosts that are Microsoft Entra joined. You need to configure single sign-on (SSO) to connect to the session hosts. The solution must enable Microsoft Entra authentication for Remote Desktop Protocol (RDP) in the Microsoft Entra tenant. Which application requires that you modify the remoteDesktopSecurityConfiguration object?

A. Windows Cloud Login
B. Microsoft Azure Windows Virtual Machine Sign-in
C. Windows 365
D. Azure Virtual Desktop
Show Answer
Correct Answer: A
Explanation:
To enable Microsoft Entra authentication for RDP as part of Azure Virtual Desktop single sign-on, you modify the remoteDesktopSecurityConfiguration object on the Windows Cloud Login enterprise application. This enables Microsoft Entra-based RDP authentication for Microsoft Entra joined session hosts.

Question 142

DRAG DROP - You have an Azure Virtual Desktop deployment. You plan to use Azure NetApp Files to store FSLogix profile containers. You need to configure an Azure Azure NetApp Files account. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Illustration for AZ-140 question 142
Show Answer
Correct Answer: Create a capacity pool Configure an Active Directory connection Create a volume
Explanation:
For Azure NetApp Files with FSLogix SMB profile containers, create a capacity pool first, then configure the Active Directory connection required for SMB access, and finally create the SMB volume. File shares are not created separately in Azure NetApp Files, and configuring a Microsoft-managed encryption key is not part of the required sequence.

Question 143

HOTSPOT - You have an Azure subscription that contains an Azure Virtual Desktop deployment. The deployment contains 25 session hosts. You create two storage accounts as shown in the following table. The storage accounts store Azure Virtual Desktop user profile data. You plan to deploy FSLogix user Profile Containers that will use Cloud Cache. You need to configure the FSLogix registry settings for each session host. How should you complete the registry settings? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Illustration for AZ-140 question 143 Illustration for AZ-140 question 143
Show Answer
Correct Answer: Enabled CCDLocations
Explanation:
Enable FSLogix Profiles by setting Enabled=1. For Cloud Cache, specify the storage endpoints in the CCDLocations MULTI_SZ value (not VHDLocations).

Question 144

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure Virtual Desktop deployment. You need to ensure that users are signed out automatically when they disconnect from a session. Solution: From the Local Group Policy Editor, you configure the Remote Session Environment settings. Does this meet the goal?

A. Yes
B. No
Show Answer
Correct Answer: B
Explanation:
The goal is to automatically sign out users after they disconnect from an Azure Virtual Desktop session. This is configured through the Remote Desktop Session Host 'Session Time Limits' Group Policy settings (such as setting a time limit for disconnected sessions and ending the session when the time limit is reached), not under the 'Remote Session Environment' node. Therefore, configuring Remote Session Environment settings does not meet the stated goal.

Question 145

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure Virtual Desktop deployment. You need to ensure that users are signed out automatically when they disconnect from a session. Solution: From the Local Group Policy Editor, you configure the Security settings. Does this meet the goal?

A. Yes
B. No
Show Answer
Correct Answer: B
Explanation:
Configuring Local Group Policy Editor Security settings does not control automatic sign-out after a disconnected Remote Desktop/Azure Virtual Desktop session. This behavior is configured through Remote Desktop Services session time limits (such as 'Set time limit for disconnected sessions' and 'End session when time limits are reached') via Group Policy under Remote Desktop Services or corresponding host pool RDP properties, not Security settings.

Question 146

DRAG DROP - Please sort new questions by topic. You have an Azure Virtual Desktop deployment. You plan to create a new host pool that meets the following requirements: • Supports up to 25 user connections • Contains 10 Windows 11 multi-session hosts • Evenly distributes user sessions across the session hosts You need to recommend which type of host pool and load-balancing algorithm to use. What should you recommend? To answer, drag the appropriate options in the correct targets. Each option may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Illustration for AZ-140 question 146
Show Answer
Correct Answer: Host pool mode: Pooled Load-balancing algorithm: Breadth-first
Explanation:
Windows 11 multi-session requires a pooled host pool for shared sessions. Breadth-first distributes user sessions evenly across all session hosts, matching the requirement.

Question 147

You have an Azure Virtual Desktop deployment that contains a pooled host pool named Pool1. Pool1 contains four Microsoft Entra joined session hosts. Users report that when they attempt to sign in to a session host, they receive a message indicating that their account is not configured to sign in. You need to assign the users a role-based access control (RBAC) role to ensure that they can sign in to the session hosts. The solution must follow the principle of least privilege. Which role should you assign to the users?

A. Desktop Virtualization Virtual Machine Contributor
B. Virtual Machine Contributor
C. Virtual Machine Administrator Login
D. Virtual Machine User Login
Show Answer
Correct Answer: D
Explanation:
For Microsoft Entra joined Azure Virtual Desktop session hosts, users must have an Azure RBAC login role to sign in. The least-privilege role for standard user sign-in is Virtual Machine User Login. Virtual Machine Administrator Login is intended for administrative access, while the Contributor roles grant VM management permissions rather than just login access.

Question 148

You have a new Azure subscription that uses Azure Virtual Desktop. You need to ensure that users who connect to Azure Virtual Desktop sessions reauthenticate every six hours. What should you do first?

A. Create a Conditional Access policy.
B. Disable Security defaults.
C. Configure an authentication methods policy.
D. Configure multi-factor authentication (MFA).
Show Answer
Correct Answer: B
Explanation:
Reauthentication every six hours is configured through a Conditional Access sign-in frequency policy. However, the question asks what you should do first in a new Azure subscription. New Microsoft Entra tenants typically have Security Defaults enabled by default, and Security Defaults and Conditional Access cannot be used together. Therefore, the first step is to disable Security Defaults before creating the required Conditional Access policy.

$19

Get all 320 questions with detailed answers and explanations

  • Instant download HTML + PDF delivered the moment payment clears.
  • Secure Stripe checkout we never see or store your card details.
  • 7-day refund if files are defective see our refund policy.