Microsoft Microsoft Certifications AZ-140 Questions & Answers

• Question 61:

  You have an Azure Virtual Desktop deployment that contains a host pool. The pool has the following settings:

  1.

  Resource group: RG1

  2.

  Host pool name: Pool1

  3.

  Location: East US

  4.

  Host pool type: Pooled

  The deployment contains the workspaces shown in the following table.

  

  For Pool1, you plan to create a RemoteApp application group named AppGroup1. In which workspaces can you register AppGroup1?

  A. Workspace1 and Workspace2 only

  B. Workspace1 and Workspace3 only

  C. Workspace1 only

  D. Workspace1, Workspace2, Workspace3, and Workspace4

  Correct Answer: B

  You can only register the app group to workspaces created in the same location as the host pool. Also. if you've previously registered another app group from the same host pool as your new app group to a workspace, it will be selected and

  you can't edit it. All app groups from a host pool must be registered to the same workspace.

  Reference:

  https://docs.microsoft.com/en-us/azure/virtual-desktop/manage-app-groups

• Question 62:

  You have an Azure Virtual Desktop deployment that contains the host pools shown in the following table.

  

  You need to create a disaster recovery environment in the West US region. The solution must minimize costs and administrative effort. What should you do?

  A. Regenerate the token and reregister the virtual machines in the host pools.

  B. Create two new host pools in the West US region.

  C. Run the Invoke-RdsUserSessionLogoff cmdlet.

  D. Create an Azure Site Recovery plan.

  Correct Answer: D

  https://learn.microsoft.com/en-us/azure/virtual-desktop/disaster-recovery

• Question 63:

  Your network contains an on-premises Active Directory domain named contoso.com. You have an Azure subscription that contains the resources shown in the following table.

  

  You need to create a share that will host FSLogix profiles for AVDPool1. The solution must meet the following requirements:

  1.

  Maximize read and write performance for the profiles.

  2.

  Control access to the SMB share by using the users and groups stored in contoso.com.

  Which account should you use to host the share?

  A. Account1

  B. Account2

  C. Account3

  Correct Answer: A

  You can create FSLogix profile containers using Azure NetApp Files, an easy-to-use Azure native platform service that helps customers quickly and reliably provision enterprise-grade SMB volumes for their Azure Virtual Desktop

  environments.

  We [Microsoft] recommend using FSLogix profile containers as a user profile solution for the Azure Virtual Desktop service. FSLogix profile containers store a complete user profile in a single container and are designed to roam profiles in

  non-persistent remote computing environments like Azure Virtual Desktop.

  Create and manage Active Directory connections for Azure NetApp Files.

  Azure NetApp Files supports both Active Directory Domain Services (AD DS) and Azure Active Directory Domain Services (AADDS) for AD connections.

  Incorrect:

  Not C: Not the preferred solution.

  Note: You can create an Azure file share authenticated by a domain controller on an existing Azure Virtual Desktop host pool. You can use this file share to store storage profiles.

  Assign Azure RBAC permissions to Azure Virtual Desktop users

  All users that need to have FSLogix profiles stored on the storage account must be assigned the Storage File Data SMB Share Contributor role.

  Users signing in to the Azure Virtual Desktop session hosts need access permissions to access your file share. Granting access to an Azure File share involves configuring permissions both at the share level as well as on the NTFS level,

  similar to a traditional Windows share.

  To configure share level permissions, assign each user a role with the appropriate access permissions. Permissions can be assigned to either individual users or an Azure AD group.

  Reference:

  https://docs.microsoft.com/en-us/azure/virtual-desktop/create-fslogix-profile-container

  https://docs.microsoft.com/en-us/azure/azure-netapp-files/create-active-directory-connections

  https://docs.microsoft.com/en-us/azure/virtual-desktop/create-file-share

• Question 64:

  You have an Azure subscription named Subscription that contains an Azure Virtual Desktop host pool named HostPool1.

  HostPool1 is managed by using Microsoft Intune. Subscription1 contains 50 users that connect to HostPool1 by using computers that run Windows 10.

  You need to prevent the users from copying files between an Azure Virtual Desktop session and the computers. The solution must minimize administrative effort.

  What should you do?

  A. Modify the RDP properties of HostPool1.

  B. Create a Conditional Access policy in Azure Active Directory (Azure AD).

  C. Create a compliance policy in Intune.

  D. Create a configuration profile in Intune.

  Correct Answer: A

• Question 65:

  You deploy an Azure Virtual Desktop session host pool.

  You need to provide a group of pilot users access to the virtual machines in the pool.

  What should you do?

  A. Create a role definition.

  B. Add the users to a Remote Desktop Users group on the virtual machines.

  C. Add the users to the local Administrators group on the virtual machines.

  D. Create a role assignment.

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/azure/virtual-desktop/delegated-access-virtual-desktop

• Question 66:

  You have an Azure Virtual Desktop deployment.

  You plan to use FSLogix profile containers.

  You need to recommend a solution that will be used to store the containers. The solution must meet the following requirements:

  1.

  The containers must be stored on solid-state drives (SSDs)

  2.

  Minimize administrative effort

  3.

  Minimize cost

  What should you recommend?

  A. Azure NetApp Files

  B. Azure Files Standard

  C. Azure Blob Storage Premium

  D. Azure Files Premium

  Correct Answer: D

  Azure Files integration with Azure Active Directory Domain Service FSLogix profile containers' performance and features take advantage of the cloud. On August 7th, 2019, Microsoft Azure Files announced the general availability of Azure Files authentication with Azure Active Directory Domain Service (Azure AD DS). By addressing both cost and administrative overhead, Azure Files with Azure AD DS Authentication is a premium solution for user profiles in the Azure Virtual Desktop service. Premium file shares enable highly I/O-intensive workloads, with high throughput and low latency. Premium file shares are offered on high-performance solid-state drive (SSD) based storage.

  Reference: https://docs.microsoft.com/en-us/azure/virtual-desktop/fslogix-containers-azure-files https://azure.microsoft.com/en-us/pricing/details/storage/files/

• Question 67:

  You create the virtual machines shown in the following table.

  

  You need a source virtual hard disk for new Azure Virtual Desktop session host deployments. The source operating system must have user-specific and machine- specific information removed. Which virtual machines can you use as the source?

  A. SourceVM3 only

  B. SourceVM1 only

  C. SourceVM1, SourceVM2, and SourceVM3

  D. SourceVM1 and SourceVM2 only

  E. SourceVM2 only

  Correct Answer: E

  SurceVM2 Only because user-information and machine-specific information should be removed because it is specifically mentioned.

• Question 68:

  You have an Azure Virtual Desktop deployment.

  You plan to create a new host pool named Pool1 that will contain five Windows 11 session hosts.

  You need to enable secure boot and vTPM on the session hosts.

  How should you configure the Virtual Machines settings?

  A. Enable encryption at rest and a platform-managed key.

  B. Set Security type to Trusted launch virtual machines.

  C. Enable a system-assigned managed identity.

  D. Set Network security group to Advanced.

  Correct Answer: B

  https://learn.microsoft.com/en-us/azure/virtual-machines/trusted-launch

• Question 69:

  You have an Azure Virtual Desktop deployment that contains a host pool. The host pool contains 15 session hosts. All the sessions hosts have FSLogix installed.

  You need to configure the path to where the user profiles are stored. The solution must minimize administrative effort.

  Which registry setting should you use?

  A. VHDLocations

  B. CCDLocations

  C. ProfileDirSDDL

  D. FlipFlopProfileDirectoryName

  Correct Answer: A

  https://learn.microsoft.com/en-us/fslogix/configure-profile-container-tutorial#configure-profile-container-registry-settings

• Question 70:

  You have an Azure Virtual Desktop personal host pool named Pool1 that contains 20 Azure AD-joined session hosts.

  You need to ensure that only approved virtual machine extensions are installed on the Pool 1 session hosts. The solution must minimize administrative effort.

  What should you use?

  A. Azure Resource Manager (ARM) templates

  B. Azure Policy

  C. Windows Admin Center

  D. Group Policy

  Correct Answer: B

  Azure Policy allows you to create and apply policies that enforce specific rules and conditions on your Azure resources, including virtual machines and extensions. You can define custom policies or use built-in policies to control what extensions can be installed on virtual machines. This minimizes administrative effort as you can centrally manage and enforce these policies across your environment without relying on manual configurations or individual host-based solutions like Group Policy.