Microsoft

AZ-140 Free Practice Questions — Page 17

Question 160

You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains 10 session hosts that were deployed by using an Azure Resource Manager (ARM) template. You discover that Windows licenses were NOT applied to the session hosts. You need to use a PowerShell script to update the licenses. Which cmdlet should you include in the solution?

A. Update-AzVm
B. Update-AzWvdDesktop
C. Update-AzWvdHostPool
D. Update-AzWvdWorkspace
E. Update-AzWvdSessionHost
Show Answer
Correct Answer: A
Explanation:
Windows licensing for Azure Virtual Desktop session hosts is applied at the virtual machine level by setting the VM's LicenseType property (for example, Windows_Client). This requires retrieving and updating each VM resource. The Update-AzVM cmdlet is used to apply this change. The other options manage Azure Virtual Desktop objects (host pools, session hosts, desktops, workspaces) and do not modify VM licensing.

Question 161

HOTSPOT - Your on-premises network contains an Active Directory domain named contoso.com that syncs with Azure AD. You deploy an Azure Virtual Desktop pooled host pool named HostPool1 that contains five hybrid-joined session hosts. You need to ensure that all the user sessions of HostPool1 meet the following requirements: • Users must use roaming user profiles. • Users must use Folder Redirection. The solution must minimize administrative effort. What should you use to meet each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Illustration for AZ-140 question 161
Show Answer
Correct Answer: Roaming user profiles: Computer Configuration in Group Policy Folder Redirection: User Configuration in Group Policy
Explanation:
For pooled, hybrid-joined Azure Virtual Desktop hosts, configuring roaming profiles via Computer Configuration GPO applies consistently to all session hosts with minimal per-user management. Folder Redirection is a per-user setting and is centrally and efficiently managed through User Configuration GPO.

Question 162

HOTSPOT - You have an Azure subscription that contains the virtual machines shown in the following table. You create an Azure Compute Gallery as shown in the Azure compute gallery exhibit. (Click the Azure compute gallery tab.) You create a virtual machine image definition as shown in the VM image definition exhibit. (Click the VM image definition tab.) For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Illustration for AZ-140 question 162 Illustration for AZ-140 question 162 Illustration for AZ-140 question 162 Illustration for AZ-140 question 162
Show Answer
Correct Answer: VM1: No VM2: Yes VM3: No
Explanation:
The image definition requires Generation 1 VMs. VM1 is Generation 2, so it cannot be used. VM2 matches Generation 1 and can be used as a source despite having fewer vCPUs, since recommended vCPU ranges are not enforced. VM3 is Generation 1 but is in a different region than the image definition, so it cannot be used as the source.

Question 163

HOTSPOT - You have an Azure subscription that contains the resources shown in the following table. You have a virtual machine named Server1 that runs Windows Server and is connected to VNet3. You need to deploy the Azure Virtual Desktop host pools shown in the following table. The solution must meet the following requirements: • The session hosts in Pool1 must access Server1 via the Microsoft backbone network. • The session hosts in Pool2 must access storage1 via the Microsoft backbone network. What should you configure on the virtual networks? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Illustration for AZ-140 question 163 Illustration for AZ-140 question 163 Illustration for AZ-140 question 163
Show Answer
Correct Answer: VNet1: Virtual Network peering VNet2: A service endpoint
Explanation:
Pool1 session hosts in VNet1 must reach Server1 in VNet3 over the Microsoft backbone, which is achieved by (global) virtual network peering between VNets. Pool2 session hosts in VNet2 must access an Azure Storage account over the Microsoft backbone; configuring a Microsoft.Storage service endpoint on VNet2 ensures backbone-only traffic without requiring private endpoints or VPN gateways.

Question 164

HOTSPOT - You have an Azure Virtual Desktop deployment that contains a host pool named HostPool1. You plan to deploy session hosts to HostPool1 as shown in the following table. Each session host must support up to 15 concurrent users. You need to recommend which operating system version to deploy from Azure Marketplace to the session hosts. What should you recommend for each session host? To answer, select the appropriate options in the answer area.

Illustration for AZ-140 question 164 Illustration for AZ-140 question 164
Show Answer
Correct Answer: Host1: Windows Server 2019 Datacenter Server Core – x64 Gen2 Host2: Windows 10 Enterprise multi-session – x64 Gen1
Explanation:
Host1 requires Windows Server 2019 with Trusted launch, which is supported only on Generation 2 VMs; Server Core is a supported Azure Marketplace image for AVD session hosts. Host2 must support multiple concurrent users on Windows 10, which is only provided by Windows 10 Enterprise multi-session.

Question 165

You have an Azure Virtual Desktop deployment that uses Azure Active Directory Domain Services (Azure AD DS). You have the following host pool: • Name: Pool1 • Type: Personal • Number of session hosts: 5 You plan to deploy two new session hosts to Pool1. What should you do before you deploy the session hosts?

A. Create a scaling plan.
B. Precreate a computer account in Azure AD DS.
C. Increase the maximum session limit.
D. Create a registration key.
Show Answer
Correct Answer: D
Explanation:
To add new session hosts to an existing Azure Virtual Desktop host pool, you must generate a host pool registration key beforehand. The registration key is used during VM deployment to register each session host with Pool1. A scaling plan, session limit change, or precreating computer accounts in Azure AD DS is not required for this task.

Question 166

DRAG DROP - You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains session hosts that run a line-of-business (LOB) app named App1. You have an Azure Compute Gallery that contains the following image: • Image definition: Image1 • Image version: 1.1.1 Image version 1.1.1 was used to deploy all the current session hosts. You plan to deploy a new virtual machine named VM1 as a source for a new image version that will contain an update for App1. Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Illustration for AZ-140 question 166
Show Answer
Correct Answer: From the Azure Compute Gallery, deploy VM1. Perform the update on App1. Use Sysprep to generalize VM1. Capture VM1 as an image version and store the version in the Azure Compute Gallery.
Explanation:
You must first deploy a VM from the existing gallery image to act as the image source. After updating the LOB app, the VM is generalized with Sysprep. Finally, the generalized VM is captured directly as a new image version in the Azure Compute Gallery.

Question 167

DRAG DROP - You have an Azure Virtual Desktop deployment that contains the resources shown in the following table. You have a Windows 11 device named Device1 that has Azure Command-Line Interface (CLI) installed. You need to use Remote Desktop Connection (mstsc.exe) on Device1 to connect to Host1. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Illustration for AZ-140 question 167 Illustration for AZ-140 question 167
Show Answer
Correct Answer: Change Bastion1 to the Standard SKU On Bastion1, select Native Client Support On Device1, run the az network bastion rdp command
Explanation:
Connecting with mstsc.exe through Azure Bastion using the native client requires the Bastion Standard SKU and Native Client Support enabled. After that, the Azure CLI command establishes the RDP connection to the private VM without a public IP.

Question 168

You have an Azure compute gallery that contains the Windows 10 images shown in the following table. You create an Azure Virtual Desktop deployment that has the following settings: • Host pool name: Pool1 • Location: West US • Host pool type: Personal Which images can you use for the session hosts?

A. Image1 only
B. Image2 only
C. Image1 and Image2 only
D. Image1 and Image3 only
E. Image1, Image2, Image3, and Image4
Show Answer
Correct Answer: C
Explanation:
The host pool is located in West US, so only images available in West US can be used. For a **Personal** Azure Virtual Desktop host pool, session hosts can be created from either **generalized or specialized** images. Therefore, Image1 (West US, generalized) and Image2 (West US, specialized) are both valid. Images in West Europe cannot be used unless replicated to West US.

Question 169

You have an Azure Virtual Desktop deployment that contains the resources shown in the following table. You need to enable just-in-time (JIT) VM access for all the session hosts. What should you do first?

A. Deploy Azure Bastion to VNET1.
B. Assign network security groups (NSGs) to the network interfaces of the five session hosts.
C. Configure Access control (IAM) for HostPool1.
D. Assign a network security group (NSG) to Subnet1.
Show Answer
Correct Answer: D
Explanation:
Just-in-time (JIT) VM access in Microsoft Defender for Cloud requires that inbound traffic to the VMs is controlled by a Network Security Group (NSG). To enable JIT for all session hosts in a scalable way, the first step is to associate an NSG with the subnet that contains the session hosts. Applying the NSG at the subnet level automatically covers all current and future session host NICs, whereas assigning NSGs to individual NICs would be unnecessary and less manageable.

$19

Get all 321 questions with detailed answers and explanations

  • Instant download HTML + PDF delivered the moment payment clears.
  • Secure Stripe checkout we never see or store your card details.
  • 7-day refund if files are defective see our refund policy.