Microsoft Microsoft Certifications AZ-140 Questions & Answers

• Question 101:

  You have an on-premises network and an Azure subscription. The subscription contains the following:

  1.

  A virtual network

  2.

  An Azure Firewall instance

  3.

  An Azure Virtual Desktop host pool

  The virtual network connects to the on-premises network by using a site-to-site VPN.

  You need to ensure that only users from the on-premises network can connect to the Azure Virtual Desktop managed resources in the host pool. The solution must minimize administrative effort.

  What should you configure?

  A. a conditional access policy

  B. an Azure Firewall rule

  C. a network security group (NSG) rule

  D. a user-defined route

  Correct Answer: A

  To ensure that only users from the on-premises network can connect to the Azure Virtual Desktop managed resources in a host pool, you can use Azure Firewall to restrict access to the Azure Virtual Desktop resources. Azure Firewall allows you to control inbound and outbound network traffic to and from your Azure resources, including Azure Virtual Desktop resources.

  https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/location-condition

• Question 102:

  You have an Azure Virtual Desktop deployment.

  You need to create a PowerShell script to sign users out of a specific session host before you perform a maintenance task.

  Which PowerShell module should you load in the script?

  A. Az.Automation

  B. Az.Compute

  C. Az.Maintenance

  D. Az.DesktopVirtualization

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/powershell/module/az.desktopvirtualization/?view=azps-6.6.0#desktopvirtualization https://techgenix.com/logging-off-and-removing-wvd-user-sessions/

• Question 103:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure Virtual Desktop host pool named Pool1 that is integrated with an Azure Active Directory Domain Services (Azure AD DS) managed domain.

  You need to configure idle session timeout settings for users that connect to the session hosts in Pool1.

  Solution: From the Azure portal, you modify the Advanced settings in the RDP Properties of Pool1.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 104:

  You network contains an on-premises Active Directory domain. The domain contains a universal security group named AVDusers.

  You have a hybrid Azure Active Directory (Azure AD) tenant. AVDusers syncs to Azure AD.

  You have an Azure Virtual Desktop host pool that contains four Windows 10 Enterprise multi-session hosts.

  You need to ensure that only the members of AVDusers can establish Azure Virtual Desktop sessions to the host pool.

  What should you do?

  A. Assign AVDusers to an Azure role scoped to each host pool.

  B. On each session host, add AVDusers to the local Remote Desktop Users group.

  C. Assign AVDusers to an Azure role scoped to the session hosts.

  D. Assign AVDusers to an application group.

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/azure/virtual-desktop/manage-app-groups

• Question 105:

  You have an Azure Active Directory Domain Services (Azure AD DS) managed domain named contoso.com.

  You create an Azure Virtual Desktop host pool named Pool1. You assign the Virtual Machine Contributor role for the Azure subscription to a user named Admin1.

  You need to ensure that Admin1 can add session hosts to Pool1. The solution must use the principle of least privilege.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Assign Admin1 the Desktop Virtualization Host Pool Contributor role for Pool1

  B. Assign Admin1 the Desktop Virtualization Session Host Operator role for Pool1

  C. Add Admin1 to the AAD DC Administrators group

  D. Assign a Microsoft 365 Enterprise E3 license to Admin1

  E. Generate a registration token

  Correct Answer: BE

  Reference: https://docs.microsoft.com/en-us/azure/virtual-desktop/rbac

• Question 106:

  You have a shared image gallery that contains the Windows 10 images shown in the following table.

  

  You create an Azure Virtual Desktop deployment that has the following settings:

  1.

  Host pool name: Pool1

  2.

  Location: West US

  3.

  Host pool type: Personal

  Which images can you use for the session hosts?

  A. Image1 only

  B. Image1, Image2, Image3, and Image4

  C. Image2 only

  D. Image1 and Image2 only

  E. Image1 and Image3 only

  Correct Answer: A

  Reference: https://azure.microsoft.com/en-in/blog/vm-image-blog-post/

• Question 107:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure Virtual Desktop host pool that contains five session hosts. The session hosts run Windows 10 Enterprise multi-session.

  You need to prevent users from accessing the internet from Azure Virtual Desktop sessions. The session hosts must be allowed to access all the required Microsoft services.

  Solution: You configure the RDP Properties of the host pool.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 108:

  Your company has a single office and has 40 employees.

  You are planning an Azure Virtual Desktop deployment. The estimated user workloads are shown in the following table.

  

  Half the users of each workload type work from home. All the users who work from home do NOT establish a VPN connection to the office. Approximately how much bandwidth is needed between the office and Azure to support the planned workloads?

  A. 9.5 Mbps

  B. 55 Mbps

  C. 110 Mbps

  D. 220 Mbps

  Correct Answer: B

• Question 109:

  Your network contains an on-premises Active Directory domain that syncs to an Azure Active Directory (Azure AD) tenant. The domain contains the domain controllers shown in the following table.

  

  The DNS servers are configured to forward requests to an external DNS service.

  You create a new virtual network named VNET2 that is peered to VNET1 and has gateway transit enabled.

  You plan to implement an Azure Virtual Desktop host pool in VNET2. The session hosts will be joined to the Active Directory domain.

  You need to configure DNS to meet the following requirements:

  1.

  Ensure that Azure Virtual Desktop users can resolve on-premises servers and Azure resources.

  2.

  Ensure that azure Virtual Desktop remains operational if a DNS server fails.

  3.

  Minimize administrative effort. What should you configure?

  A. the DNS settings of VNET2 to use Server2 and Server1

  B. the DNS settings of VNET2 to use the Azure DNS service

  C. the DNS settings of the virtual machines to use Server2 and Server1

  D. the DNS settings of the virtual machines to use the Azure DNS service

  Correct Answer: C

  You should configure the DNS settings of VNET2 to use Server2 and Server1 to meet the requirements.

  By configuring the DNS settings of VNET2 to use Server2 and Server1, the Azure Virtual Desktop users will be able to resolve on-premises servers and Azure resources. Since VNET2 is peered with VNET1 and has gateway transit enabled,

  the DNS servers in VNET1 will automatically be available in VNET2. This will ensure that Azure Virtual Desktop remains operational if a DNS server fails.

  Configuring the DNS settings at the VNET level will also minimize administrative effort, as you only need to make the change once instead of for each individual virtual machine.

  Reference: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-name-resolution-for-vms-and-role-instances#name-resolution-that-uses-your-own-dns-server

• Question 110:

  Your company has 60,000 users.

  You plan to deploy Azure Virtual Desktop.

  You need to recommend a storage solution for the FSLogix profile containers. The solution must provide the highest possible IOPS and the lowest latency desktop experience.

  What should you recommend?

  A. Azure Data Lake Storage

  B. Azure NetApp Files

  C. Azure Blob Storage Premium

  D. Azure Files Standard

  Correct Answer: B

  Run your most demanding Linux and Windows file workloads in Azure

  Running performance-intensive and latency-sensitive file workloads in the cloud can be hard. Azure NetApp Files makes it easy for enterprise line-of-business (LOB) and storage professionals to migrate and run complex, file-based

  applications with no code change. Azure NetApp Files is widely used as the underlying shared file-storage service in various scenarios. These include migration (lift and shift) of POSIX-compliant Linux and Windows applications, SAP HANA,

  databases, high-performance compute (HPC) infrastructure and apps, and enterprise web applications.

  Azure Files has a 3-ms latency, whereas Azure NetApp Files has a 1-ms latency. Therefore, among the options, Azure NetApp Files is the solution with the lowest latency for FSLogix profile containers.

  https://learn.microsoft.com/en-us/azure/virtual-desktop/store-fslogix-profile