DRAG DROP
-
Please sort new questions by topic.
You have an Azure Virtual Desktop deployment.
You plan to create a new host pool that meets the following requirements:
• Supports up to 25 user connections
• Contains 10 Windows 11 multi-session hosts
• Evenly distributes user sessions across the session hosts
You need to recommend which type of host pool and load-balancing algorithm to use.
What should you recommend? To answer, drag the appropriate options in the correct targets. Each option may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Host pool mode:
Pooled
Load-balancing algorithm:
Breadth-first
Explanation: A pooled host pool supports multiple users per Windows 11 multi-session VM. Breadth-first load balancing evenly distributes user sessions across all available session hosts, meeting the requirement to spread up to 25 connections across 10 hosts.
Question 140
You have an Azure Virtual Desktop deployment that contains a pooled host pool named Pool1. Pool1 contains four Microsoft Entra joined session hosts.
Users report that when they attempt to sign in to a session host, they receive a message indicating that their account is not configured to sign in.
You need to assign the users a role-based access control (RBAC) role to ensure that they can sign in to the session hosts. The solution must follow the principle of least privilege.
Which role should you assign to the users?
A. Desktop Virtualization Virtual Machine Contributor
B. Virtual Machine Contributor
C. Virtual Machine Administrator Login
D. Virtual Machine User Login
Show Answer
Correct Answer: D
Explanation: Users must be granted permission to sign in to the Azure Virtual Desktop session host virtual machines. The Virtual Machine User Login role allows users to log in to VMs without granting management or administrative permissions. This satisfies the principle of least privilege. Other roles either provide VM management capabilities or administrative login rights that are not required.
Question 141
You have a new Azure subscription that uses Azure Virtual Desktop.
You need to ensure that users who connect to Azure Virtual Desktop sessions reauthenticate every six hours.
What should you do first?
A. Create a Conditional Access policy.
B. Disable Security defaults.
C. Configure an authentication methods policy.
D. Configure multi-factor authentication (MFA).
Show Answer
Correct Answer: B
Explanation: Reauthentication frequency (every six hours) is enforced by a Conditional Access sign-in frequency setting. In a brand-new Azure/Entra tenant, Security Defaults are enabled by default and block the creation of Conditional Access policies. Therefore, the first required step is to disable Security Defaults so that a Conditional Access policy can be created afterward.
Question 142
You have an Azure Virtual Desktop deployment.
You need to secure administrative access to session hosts. The solution must require that administrators use the Azure portal to access the session hosts.
What should you include in the solution?
A. Azure Firewall
B. Azure Bastion
C. Conditional Access policies
D. Microsoft Defender for Cloud
Show Answer
Correct Answer: B
Explanation: Azure Bastion provides secure RDP/SSH access to virtual machines directly through the Azure portal without exposing session hosts to the public internet. This meets the requirement to secure administrative access and require administrators to use the Azure portal. Other options do not provide portal-based VM access.
Question 143
You have an Azure Virtual Desktop deployment.
You use Hyper-V to create a virtual machine that runs Windows 10 and has the following configurations:
• Virtual machine generation: Generation 1
• Disk type: Dynamically expanding
• Disk format: VHDX
• Disk size: 2 TB
You need to prepare the virtual machine before uploading it to Azure.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Change the disk type to fixed.
B. Decrease the disk size to 1 T
C. Change the disk format to VHD.
D. Change the disk type to differencing.
E. Change the virtual machine generation to generation 2.
Show Answer
Correct Answer: A, C
Explanation: To upload a Hyper-V VM to Azure, the OS disk must meet Azure image requirements. Azure requires a fixed-size disk, not dynamically expanding, so the disk type must be changed to fixed. Azure also requires the disk format to be VHD (not VHDX). Generation 1 VMs are supported, and a 2 TB disk size is acceptable, so no change is needed for generation or size.
Question 144
You have an Azure Virtual Desktop deployment.
You have a custom virtual machine image named Image1.
You need to use Azure VM Image Builder to update Image1.
What should you do first?
A. Register the Microsoft.DesktopVirtualization resource provider.
B. Create an Azure Storage account.
C. Create an Azure Compute Gallery.
D. Register the Microsoft.VirtualMachineImages resource provider.
Show Answer
Correct Answer: D
Explanation: Azure VM Image Builder requires the Microsoft.VirtualMachineImages resource provider to be registered in the subscription before you can create or update images using the service. This is the prerequisite step before working with Image Builder resources.
Question 145
You have an Azure Virtual Desktop deployment.
You plan to use just-in-time (JIT) VM access to manage session host virtual machines.
You need to recommend license requirements for JIT VM access. Your solution must minimize costs.
Which license should you recommend?
A. Enterprise Mobility + Security E5
B. Microsoft 365 E5
C. Microsoft Defender for Servers Plan 1
D. Microsoft Defender for Servers Plan 2
Show Answer
Correct Answer: D
Explanation: Just-in-time (JIT) VM access is a feature of Microsoft Defender for Cloud. Among the Defender for Servers plans, JIT VM access is included only in Microsoft Defender for Servers Plan 2. Plan 1 does not support JIT, and Microsoft 365 or EMS licenses are unrelated. Therefore, to enable JIT VM access while minimizing cost, Defender for Servers Plan 2 is required.
Question 146
HOTSPOT -
You have an Azure Virtual Desktop deployment that uses Cloud Cache to store user profiles.
You plan to deploy Microsoft Defender Antivirus exclusions to the session hosts by using the following PowerShell script.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: storageacct1 and storageacct2 only
Media-stack folder, Cache folder, and all text files
Explanation: The script explicitly adds VHD/VHDX exclusions for UNC paths pointing to storageacct1 and storageacct2. The Cloud Cache exclusions reference an incorrect location/variable, so only the storage accounts are effectively covered. For Microsoft Teams, exclusions include *.txt files and both Media-stack and meeting-addin Cache paths, which together cover the Media-stack folder, Cache folder, and all text files.
Question 147
You have an Azure Virtual Desktop deployment that contains two Azure regions.
You plan to implement a disaster recovery solution for user profiles. The solution must meet the following requirements:
• Users must retain their user profiles if a single region fails.
• Administrative effort must be minimized.
What should you include in the recommendation?
A. Azure Storage accounts that use zone-redundant storage (ZRS)
B. Azure Site Recovery
C. FSLogix Cloud Cache
D. Azure Backup
E. FSLogix with VHDLocations
Show Answer
Correct Answer: C
Explanation: FSLogix Cloud Cache is designed specifically for user profile resiliency in Azure Virtual Desktop. It allows you to configure multiple profile storage locations across regions, so if one region fails, users automatically access their profiles from another location. This meets the requirement for retaining profiles during a regional failure while minimizing administrative effort. Azure Site Recovery protects virtual machines, not profile data, and the other options do not provide simple cross-region profile failover.
Question 149
You have an Azure subscription that contains an Azure Compute Gallery named Gallery1 and a virtual machine named Template1. Template1 has custom apps and settings configured.
You plan to deploy Azure Virtual Desktop session hosts by using a custom virtual machine image. The solution must meet the following requirements:
• The custom image must be stored in Gallery1.
• The custom image must be based on Template1.
• All new session hosts must have unique computer names and identifiers.
You need to create the custom image.
What should you do in the Azure portal?
A. From Gallery1, create a new VM application definition.
B. From Gallery1, create a new VM image definition.
C. From Template1, capture a generalized virtual machine image.
D. From Template1, capture a specialized virtual machine image.
Show Answer
Correct Answer: C
Explanation: To deploy multiple Azure Virtual Desktop session hosts with unique computer names and identifiers, the source VM must be generalized. Capturing a generalized image from Template1 (after Sysprep) removes machine-specific information while preserving installed apps and settings. The generalized image can then be stored in Azure Compute Gallery (Gallery1) and used to create new session hosts. VM application definitions are not images, image definitions alone are insufficient without capture, and specialized images would retain duplicate identifiers.
$19
Get all 321 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
