Microsoft Microsoft Certifications AZ-140 Questions & Answers

• Question 131:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure Virtual Desktop host pool that contains five session hosts. The session hosts run Windows 10 Enterprise multi-session.

  You need to prevent users from accessing the internet from Azure Virtual Desktop sessions. The session hosts must be allowed to access all the required Microsoft services.

  Solution: You modify the IP configuration of each session host.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 132:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure Virtual Desktop host pool that contains five session hosts. The session hosts run Windows 10 Enterprise multi-session.

  You need to prevent users from accessing the internet from Azure Virtual Desktop sessions. The session hosts must be allowed to access all the required Microsoft services.

  Solution: You configure the Address space settings of the virtual network that contains the session hosts.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 133:

  You plan to deploy Azure Virtual Desktop session host virtual machines based on a preconfigured master image. The master image will be stored in a shared image gallery.

  You create a virtual machine named Image1 to use as the master image. You install applications and apply configuration changes to Image1.

  You need to ensure that the new session host virtual machines created based on Image1 have unique names and security identifiers.

  What should you do on Image1 before you add the image to the shared image gallery?

  A. At a command prompt, run the set computername command.

  B. At a command prompt, run the sysprep command.

  C. From PowerShell, run the rename-computer cmdlet.

  D. From the lock screen of the Windows device, perform a Windows Autopilot Reset.

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/prepare-for-upload-vhd-image#determine-when-to-use-sysprep

• Question 134:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure Virtual Desktop host pool that contains five session hosts. The session hosts run Windows 10 Enterprise multi-session.

  You need to prevent users from accessing the internet from Azure Virtual Desktop sessions. The session hosts must be allowed to access all the required Microsoft services.

  Solution: You configure rules in the network security group (NSG) linked to the subnet of the session hosts.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/azure/virtual-network/tutorial-filter-network-traffic

• Question 135:

  You have a shared image gallery that contains the Windows 10 images shown in the following table.

  

  You create a Windows Virtual Desktop deployment that has the following settings:

  1.

  Host pool name: Pool1

  2.

  Location: West US

  3.

  Host pool type: Personal

  Which images can you use for the session hosts?

  A. Image1 only

  B. Image1, Image2, Image3, and Image4

  C. Image2 only

  D. Image1 and Image2 only

  E. Image1 and Image3 only

  Correct Answer: E

  Reference: https://azure.microsoft.com/en-in/blog/vm-image-blog-post/

• Question 136:

  You deploy a Windows Virtual Desktop host pool named Pool1.

  You have an Azure Storage account named store1 that stores FSLogix profile containers in a share named profiles.

  You need to configure the path to the storage containers for the session hosts.

  Which path should you use?

  A. \\store1.blob.core.windows.net\profiles

  B. https://store1.file.core.windows.net/profiles

  C. \\store1.file.core.windows.net\profiles

  D. https://store1.blob.core.windows.net/profiles

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/azure/virtual-desktop/create-profile-container-adds

• Question 137:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Windows Virtual Desktop host pool named Pool1 that is integrated with an Azure Active Directory Domain Services (Azure AD DS) managed domain.

  You need to configure idle session timeout settings for users that connect to the session hosts in Pool1.

  Solution: From the Azure portal, you modify the Session behavior settings in the RDP Properties of Pool1.

  Does that meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Session Time Limits

• Question 138:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Windows Virtual Desktop host pool named Pool1 that is integrated with an Azure Active Directory Domain Services (Azure AD DS) managed domain.

  You need to configure idle session timeout settings for users that connect to the session hosts in Pool1.

  Solution: From an Azure AD DS-joined computer, you modify the AADDC Computers GPO settings.

  Does that meet the goal?

  A. Yes

  B. No

  Correct Answer: A

• Question 139:

  You have a Windows Virtual Desktop host pool named Pool1 and an Azure Storage account named Storage1. Storage1 stores FSLogix profile containers in a share folder named share1.

  You create a new group named Group1. You provide Group1 with permission to sign in to Pool1.

  You need to ensure that the members of Group1 can store the FSLogix profile containers in share1. The solution must use the principle of least privilege.

  Which two privileges should you assign to Group1? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. the Storage Blob Data Contributor role for storage1

  B. the List folder / read data NTFS permissions for share1

  C. the Modify NTFS permissions for share1

  D. the Storage File Data SMB Share Reader role for storage1

  E. the Storage File Data SMB Share Elevated Contributor role for storage1

  F. the Storage File Data SMB Share Contributor role for storage1

  Correct Answer: CF

  Ref: https://learn.microsoft.com/en-us/azure/virtual-desktop/fslogix-profile-container-configure-azure-files-active-directory?tabs=adds

  Assign RBAC role to users

  Users needing to store profiles in the file share will need permission to access it. To do this, you'll need to assign each user the Storage File Data SMB Share Contributor role

  Then set NTFS permissions for example ((M) is for Modify):

  icacls y: /grant "[email protected]:(M)"

  icacls y: /grant "Creator Owner:(OI)(CI)(IO)(M)"

  Reference:

  https://docs.microsoft.com/en-us/azure/virtual-desktop/create-file-share

• Question 140:

  You have a Windows Virtual Desktop host pool.

  You need to install Microsoft Antimalware for Azure on the session hosts.

  What should you do?

  A. Add an extension to each session host.

  B. From a Group Policy Object (GPO), enable Windows 10 security features.

  C. Configure the RDP Properties of the host pool.

  D. Sign in to each session host and install a Windows feature.

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/azure/security/fundamentals/antimalware