Microsoft Microsoft Certifications AZ-140 Questions & Answers

• Question 171:

  Which role should you assign to Operator2 to meet the technical requirements?

  A. Desktop Virtualization Session Host Operator

  B. Desktop Virtualization Host Pool Contributor

  C. Desktop Virtualization User Session Operator

  D. Desktop Virtualization Contributor

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/azure/virtual-desktop/rbac

• Question 172:

  Which setting should you modify for VNET4 before you can deploy Pool4?

  A. Service endpoints

  B. Address space

  C. DNS servers

  D. Access control (IAM)

  E. Peerings

  Correct Answer: C

  DNS should be configured to use an Active Directory Domain Controller.

• Question 173:

  You have an Azure Virtual Desktop deployment that contains two Azure regions. You plan to implement a disaster recovery solution for user profiles. The solution must meet the following requirements:

  1.

  Users must retain their user profiles if a single region fails.

  2.

  Administrative effort must be minimized. What should you include in the recommendation?

  A. Azure Storage accounts that use zone-redundant storage (ZRS)

  B. Azure Site Recovery

  C. FSLogix Cloud Cache

  D. Azure Backup

  E. FSLogix with VHDLocations

  Correct Answer: C

• Question 174:

  You need to configure the virtual machines that have the Pool1 prefix. The solution must meet the technical requirements. What should you use?

  A. a Windows Virtual Desktop automation task

  B. Virtual machine auto-shutdown

  C. Service Health in Azure Monitor

  D. Azure Automation

  Correct Answer: D

  "This scenario is the default configuration when you first deploy Start/Stop VMs during off-hours. For example, you can configure the feature to stop all VMs across a subscription when you leave work in the evening, and start them in the morning when you are back in the office." Reference: https://docs.microsoft.com/en-us/azure/logic-apps/create-automation-tasks-azure-resources https://docs.microsoft.com/en-us/azure/automation/automation-solution-vm-management-config#schedule

• Question 175:

  You have an Azure Virtual Desktop deployment.

  You plan to use just-in-time (JIT) VM access to manage session host virtual machines.

  You need to recommend license requirements for JIT VM access. Your solution must minimize costs.

  Which license should you recommend?

  A. Microsoft Defender for Servers Plan 2

  B. Microsoft 365 E5

  C. Enterprise Mobility + Security E5

  D. Microsoft Defender for Servers Plan 1

  Correct Answer: D

• Question 176:

  HOTSPOT

  You have two Azure subscriptions that are linked to an Azure Active Directory (Azure AD) tenant named contoso.com and contain an Azure Virtual Desktop deployment. The tenant contains a user named User1.

  When User1 signs in to Azure Security Center, the user receives the message shown in the following exhibit.

  

  You need to ensure that User1 can manage security information for the tenant. The solution must use the principle of least privilege. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Security administrator for contoso.com Incorrect:

  *

  Not at the subscription level, as there are two subscriptions.

  *

  Not Root management group level Each directory is given a single top-level management group called the root management group. The root management group is built into the hierarchy to have all management groups and subscriptions fold up to it. This root management group allows for global policies and Azure role assignments to be applied at the directory level.

  Box 2: Privileged Role Administrator

  You need to ensure that User1 can manage security information for the tenant.

  Privileged Role Administrator - Can manage role assignments in Azure AD, and all aspects of Privileged Identity Management.

  Incorrect:

  *

  External Identity Provider Administrator This administrator manages federation between Azure AD organizations and external identity providers. With this role, users can add new identity providers and configure all available settings (e.g. authentication path, service ID, assigned key containers). This user can enable the Azure AD organization to trust authentications from external identity providers. Reference: https://docs.microsoft.com/en-us/azure/governance/management-groups/overview https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference

• Question 177:

  HOTSPOT

  You have an Azure subscription that contains a user named User1.

  The subscription uses the Azure Virtual Desktop host pools shown in the following table.

  

  You need to ensure that User1 can create RemoteApp app groups that will be used to stream a suite of custom apps from the host pools. The solution must meet the following requirements:

  The apps must be available to the users in all the pools.

  The principle of least privilege must be followed.

  Administrative effort must be minimized.

  Which role should you assign to User1, and what is the minimum number of app groups that User1 should create? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 178:

  HOTSPOT

  You have an Azure Virtual Desktop host pool named HostPool1 that contains 20 session hosts.

  You create a new scaling plan that has the Ramp-up settings shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: 4

  20%, minimum percentage of hosts, of 20 session hosts is 4 hosts.

  Box 2: evenly across all available session hosts

  The load balancing algorithm is breadth-first.

  Breadth-first load balancing allows you to evenly distribute user sessions across the session hosts in a host pool.

  Reference:

  https://docs.microsoft.com/en-us/azure/virtual-desktop/host-pool-load-balancing

• Question 179:

  HOTSPOT

  You have an Azure Virtual Desktop deployment that contains the resources shown in the following table.

  

  You need to perform the following configurations: Enable a managed identity for App1.

  Enable Clipboard redirection for App1.

  On which resources should you perform the configurations? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 180:

  HOTSPOT

  You have an Azure Virtual Desktop host pool named HostPool1 that must support 60 sessions.

  The session hosts for HostPool1 are configured as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer: