You have an Azure Active Directory Domain Services (Azure AD DS) domain named contoso.com.
You have an Azure Storage account named storage1. Storage1 hosts a file share named share1 that has share and file system permissions configured. Share1 is configured to use contoso.com for authentication.
You create an Azure Virtual Desktop host pool named Pool1. Pool1 contains two session hosts that use the Windows 10 multi-session + Microsoft 365 Apps image.
You need to configure an FSLogix profile container for Pool1.
What should you do next?
A. Install the FSLogix agent on the session hosts of Pool1.
B. From storage1, set Allow shared key access to Disabled.
C. Configure the Profiles setting for the session hosts of Pool1.
D. Generate a shared access signature (SAS) key for storage1.
Show Answer
Correct Answer: C
Explanation: The Windows 10 multi-session image includes the FSLogix agent. Since the share is already configured for contoso.com authentication and has the required permissions, the next step is to configure the FSLogix Profiles settings on the session hosts, including the profile container location.
Question 9
HOTSPOT
-
You have 20 Azure Virtual Desktop session hosts that run Windows 11.
You need to enable the following features on the session hosts:
• Controlled folder access
• Reputation-based protection
Which Windows Security tile should you use to enable each feature? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Explanation: Controlled folder access is configured under Windows Security > Virus & threat protection (Ransomware protection). Reputation-based protection is configured under App & browser control.
Question 9
Case study -
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study -
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Overview -
Northwind Traders is a manufacturing company based in New York City.
Existing Environment -
Identity Environment -
The on-premises network contains an Active Directory Domain Services (AD DS) domain named northwindtraders.com.
Northwind Traders has a Microsoft Entra tenant and a Microsoft Entra Domain Services managed domain. The northwindtraders.com domain syncs with the Microsoft Entra tenant.
Virtual Machines -
The company has an on-premises Hyper-V virtual machine named VM1 that has the following configurations:
• Generation: 1
• Disk size: 2 TB
• Disk format: VHDX
• Disk type: Dynamically expanding
Cloud Services -
Northwind Traders has a Microsoft 365 E5 subscription. The subscription contains 500 users that are assigned Microsoft 365 E5 licenses.
The company has an Azure subscription that contains the resources shown in the following table.
Both subscriptions are linked to the Microsoft Entra tenant.
Requirements -
Planned Changes -
Northwind Traders identifies the following planned changes:
• Deploy an Azure Virtual Desktop host pool that will contain 10 session hosts joined to the Microsoft Entra Domain Services managed domain.
• Configure VM1 as the source image for the Azure Virtual Desktop deployment and upload the image to Azure.
• The Azure Virtual Desktop deployment will provide access to a custom app named App1.
Performance Requirements -
Northwind Traders identifies the following performance requirements:
• Each Azure Virtual Desktop session host must support 15 user sessions.
• Each new user session must be assigned to a single session host until the maximum session limit is reached for that host.
Application Requirements -
Northwind Traders identifies the following application requirements:
• Microsoft OneDrive must launch when users connect to a RemoteApp session in Azure Virtual Desktop.
• App1 requires a desktop resolution of 1280 x 1024.
• Administrative effort must be minimized.
Disaster Recovery Requirements -
Northwind Traders identifies the following disaster recovery requirements for the Azure Virtual Desktop deployment:
• Minimize outages if an Azure region fails.
• Minimize the recovery time objective (RTO).
• Minimize administrative effort in the event of a failover.
Security Requirements -
Northwind Traders identifies the following security requirements:
• When users sign in to the Azure Virtual Desktop deployment by using the Azure Virtual Desktop client, they must authenticate by using their Microsoft Entra username and password only.
• When users sign in to the Azure Virtual Desktop deployment by using a web browser, they must authenticate by using the Microsoft Authenticator app.
• All the Azure Virtual Desktop session hosts deployed by using the VM1 source image must be onboarded to Microsoft Defender for Endpoint.
• The client version and operating system used to connect to the session hosts must be logged.
• The solution must follow the principle of least privilege.
Networking Requirements -
The Azure Virtual Desktop session hosts must be able to access the resources on the on-premises network.
User Profile Requirements -
Northwind Traders identifies the following user profile requirements:
• Users must be able to access share1 by using their Microsoft Entra account.
• Azure Virtual Desktop user profiles must be managed by using FSLogix.
• All user profiles must be stored in share1.
You need to prepare the disk on VM1 for use with the Azure Virtual Desktop deployment.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Convert the disk format to VHD.
B. Compact the disk.
C. Convert the disk type to Differencing.
D. Convert the disk type to Fixed size.
E. Merge the disk.
Show Answer
Correct Answer: A, D
Explanation: Azure requires the uploaded VM disk to be in VHD format and fixed size. VM1’s disk is currently a dynamically expanding VHDX, so convert it to a fixed-size VHD before uploading it.
Question 10
DRAG DROP
-
You have an Azure subscription that contains the resources shown in the following table.
share1 stores FSLogix profile containers and is backed up once a day to Vault1.
You need to back up share1 to Vault2.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Show Answer
Correct Answer: Stop the backup for share1.
Unregister storage1.
Configure share1 to back up to Vault2.
Explanation: An Azure Files share can be protected by only one Recovery Services vault at a time. Stop protection in the current vault, unregister the storage account from that vault, then configure backup in the new vault. Deleting snapshots or disabling soft delete is not required.
Question 10
You have a Microsoft 365 E5 subscription.
You have an Azure subscription.
You plan to deploy the Azure Virtual Desktop host pools shown in the following table.
What is the maximum number of users that can connect simultaneously to the Azure Virtual Desktop deployment?
A. 15
B. 23
C. 45
D. 60
Show Answer
Correct Answer: D
Explanation: Pool 1 supports up to 5 × 6 = 30 simultaneous sessions. Pool 2 supports up to 3 × 5 = 15. The 15 session hosts in the personal pool can each host one assigned user, adding 15. Total: 30 + 15 + 15 = 60 users.
Question 11
You have an Azure Virtual Desktop deployment.
You use Hyper-V to create a virtual machine that runs Windows 11 and has the following configurations:
• Virtual machine generation: Generation 2
• Disk type: Dynamically expanding
• Disk format: VHDX
• Disk size: 2 TB
You need to prepare the virtual machine before uploading it to Azure.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Decrease the disk size to 1 TB.
B. Change the disk type to fixed.
C. Change the disk type to differencing.
D. Change the disk format to VH
E. Change the virtual machine generation to generation 1.
Show Answer
Correct Answer: B, D
Explanation: Before uploading a Hyper-V VM to Azure, the virtual hard disk must be in the VHD format and use a fixed-size disk. Generation 2 VMs are supported in Azure, so no generation change is required, and a 2 TB OS disk is within Azure's supported limit.
Question 11
You have an Azure subscription that contains an Azure Virtual Desktop deployment, a standard Azure Firewall instance named FW1, and the virtual networks shown in the following table.
You need to configure VNet2 to route all outbound traffic via FW1. The solution must minimize the impact on the Azure Virtual Desktop deployment.
What should you do first?
A. Upgrade FW1 to the Premium SKU.
B. Deploy Azure NAT Gateway to VNet1.
C. For FW1, enable DNS Proxy.
D. Deploy Azure Route Server to VNet2.
Show Answer
Correct Answer: C
Explanation: Enable DNS Proxy on FW1 first so the firewall can reliably apply the FQDN-based rules needed for Azure Virtual Desktop connectivity. Then configure the required firewall rules and a default route from VNet2 to FW1. Azure Route Server is not needed for this routing.
Sources:
https://learn.microsoft.com/en-us/azure/firewall/protect-azure-virtual-desktop
Question 12
You have an Azure Virtual Desktop deployment that contains the resources shown in the following table.
You need to ensure that users can connect to a session host in the deallocated state.
On which resources can you enable Start VM on Connect?
A. Workspace1 only
B. Azure virtual machines
C. P1-0 and P1-1
D. Pool1 only
Show Answer
Correct Answer: D
Explanation: Start VM on Connect is enabled on the host pool. Therefore, it can be enabled on Pool1, not on the workspace or individual session hosts.
Question 12
HOTSPOT
-
You have an Azure subscription that contains an Azure Virtual Desktop deployment. The deployment contains two session hosts.
You need to enable Azure Virtual Desktop Insights for the deployment.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: In the subscription: Deploy a Log Analytics workspace
On the session hosts: The Azure Monitor Agent
Explanation: Azure Virtual Desktop Insights stores and analyzes data in a Log Analytics workspace and collects telemetry from session hosts by using the Azure Monitor Agent.
Question 13
Case study -
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study -
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Overview -
Northwind Traders is a manufacturing company based in New York City.
Existing Environment -
Identity Environment -
The on-premises network contains an Active Directory Domain Services (AD DS) domain named northwindtraders.com.
Northwind Traders has a Microsoft Entra tenant and a Microsoft Entra Domain Services managed domain. The northwindtraders.com domain syncs with the Microsoft Entra tenant.
Virtual Machines -
The company has an on-premises Hyper-V virtual machine named VM1 that has the following configurations:
• Generation: 1
• Disk size: 2 TB
• Disk format: VHDX
• Disk type: Dynamically expanding
Cloud Services -
Northwind Traders has a Microsoft 365 E5 subscription. The subscription contains 500 users that are assigned Microsoft 365 E5 licenses.
The company has an Azure subscription that contains the resources shown in the following table.
Both subscriptions are linked to the Microsoft Entra tenant.
Requirements -
Planned Changes -
Northwind Traders identifies the following planned changes:
• Deploy an Azure Virtual Desktop host pool that will contain 10 session hosts joined to the Microsoft Entra Domain Services managed domain.
• Configure VM1 as the source image for the Azure Virtual Desktop deployment and upload the image to Azure.
• The Azure Virtual Desktop deployment will provide access to a custom app named App1.
Performance Requirements -
Northwind Traders identifies the following performance requirements:
• Each Azure Virtual Desktop session host must support 15 user sessions.
• Each new user session must be assigned to a single session host until the maximum session limit is reached for that host.
Application Requirements -
Northwind Traders identifies the following application requirements:
• Microsoft OneDrive must launch when users connect to a RemoteApp session in Azure Virtual Desktop.
• App1 requires a desktop resolution of 1280 x 1024.
• Administrative effort must be minimized.
Disaster Recovery Requirements -
Northwind Traders identifies the following disaster recovery requirements for the Azure Virtual Desktop deployment:
• Minimize outages if an Azure region fails.
• Minimize the recovery time objective (RTO).
• Minimize administrative effort in the event of a failover.
Security Requirements -
Northwind Traders identifies the following security requirements:
• When users sign in to the Azure Virtual Desktop deployment by using the Azure Virtual Desktop client, they must authenticate by using their Microsoft Entra username and password only.
• When users sign in to the Azure Virtual Desktop deployment by using a web browser, they must authenticate by using the Microsoft Authenticator app.
• All the Azure Virtual Desktop session hosts deployed by using the VM1 source image must be onboarded to Microsoft Defender for Endpoint.
• The client version and operating system used to connect to the session hosts must be logged.
• The solution must follow the principle of least privilege.
Networking Requirements -
The Azure Virtual Desktop session hosts must be able to access the resources on the on-premises network.
User Profile Requirements -
Northwind Traders identifies the following user profile requirements:
• Users must be able to access share1 by using their Microsoft Entra account.
• Azure Virtual Desktop user profiles must be managed by using FSLogix.
• All user profiles must be stored in share1.
Which monitoring solution should you configure to meet the security requirements?
A. Azure Virtual Desktop Insights
B. Application Insights
C. VM insights
D. Azure Monitor activity log insights
Show Answer
Correct Answer: A
Explanation: Azure Virtual Desktop Insights provides monitoring data for AVD connections, including the client version and operating system used to connect. The other options do not provide this AVD-specific connection information.
$19
Get all 322 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.