AZ-140 — questions

You have an Azure Virtual Desktop deployment. You have a RemoteApp named App1. You discover that from the Save As dialog box of App1, users can run executable applications other than App1 on the session hosts. You need to ensure that the users can run only published applications on the session hosts. What should you do?

You deploy an Azure Virtual Desktop session host pool that includes ten virtual machines. You need to provide a group of pilot users access to the virtual machines in the pool. What should you do?

You have an Azure Active Directory Domain Services (Azure AD DS) managed domain named contoso.com. You create an Azure Virtual Desktop host pool named Pool1. You assign the Virtual Machine Contributor role for the Azure subscription to a user named Admin1. You need to ensure that Admin1 can add session hosts to Pool1. The solution must use the principle of least privilege. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure Virtual Desktop host pool named Pool1 that is integrated with an Azure Active Directory Domain Services (Azure AD DS) managed domain. You need to configure idle session timeout settings for users that connect to the session hosts in Pool1. Solution: From the Azure portal, you modify the Advanced settings in the RDP Properties of Pool1. Does this meet the goal?

You have a hybrid Azure Active Directory (Azure AD) tenant. You plan to deploy an Azure Virtual Desktop personal host pool. The host pool will contain 15 virtual machines that run Windows 10 Enterprise. The virtual machines will be joined to the on-premises Active Directory domain and used by the members of a domain group named Department1. You need to ensure that each user is added automatically to the local Administrators group on the virtual machine to which the user signs in. What should you configure?

You have an Azure Virtual Desktop deployment that contains the resources shown in the following table. You plan to enable Start VM on connect for Pool1. You create a custom Azure role named Role1 that has sufficient permissions to start virtual machines on demand. You need to ensure that the session hosts in Pool1 can start on demand. To which service principal should you assign Role1?

You have an Azure Virtual Desktop deployment that contains the resources shown in the following table. You need to enable just-in-time (JIT) VM access for all the session hosts. What should you do first?

You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains two session hosts named Host1 and Host2. You need to enable screen capture protection for the deployment. What should you do?

You have an on-premises Active Directory Domain Services (AD DS) domain named contoso.com that syncs with an Azure AD tenant. You have an Azure subscription that is linked to the Azure AD tenant. The subscription contains a user named User1 that has the following properties: • User logon name: [email protected] • SID: S-1-5-21-4534338-1127018997-2609994386-5108 • User logon name (pre-Windows 2000): CONTOSO\User1 The subscription contains an Azure Virtual Desktop deployment. The deployment contains a domain-joined session host named Host1 and an Azure file share. You need to configure per-user FSLogix profile settings for Host1. How should you reference User1 in the FSLogix registry configuration?

You have an Azure Virtual Desktop deployment. You plan to use just-in-time (JIT) VM access to manage session host virtual machines. You need to recommend license requirements for JIT VM access. Your solution must minimize costs. Which license should you recommend?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure Virtual Desktop deployment. You need to ensure that users are signed out automatically when they disconnect from a session. Solution: From the Local Group Policy Editor, you configure the Security settings. Does this meet the goal?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure Virtual Desktop deployment. You need to ensure that users are signed out automatically when they disconnect from a session. Solution: From the Local Group Policy Editor, you configure the Remote Session Environment settings. Does this meet the goal?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure Virtual Desktop deployment. You need to ensure that users are signed out automatically when they disconnect from a session. Solution: From the Local Group Policy Editor, you configure the Session Time Limits settings. Does this meet the goal?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure Virtual Desktop deployment. You need to ensure that users are signed out automatically when they disconnect from a session. Solution: From the Local Group Policy Editor, you configure the Connections settings. Does this meet the goal?

You have a new Azure subscription that uses Azure Virtual Desktop. You need to ensure that users who connect to Azure Virtual Desktop sessions reauthenticate every six hours. What should you do first?

You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. You plan to create a Windows 10 image named Image1 to deploy new session hosts to Pool1. You need to ensure that all the new session hosts deployed by using Image1 are onboarded to Microsoft Defender for Endpoint. What should you do?

Your on-premises network contains an Active Directory Domain Services (AD DS) domain named contoso.com. You have an Azure subscription that is linked to a Microsoft Entra tenant named contoso.onmicrosoft.com. Contoso.com syncs with contoso.onmicrosoft.com. You have a partner company that has a Microsoft Entra tenant named fabrikam.com. Contoso.onmicrosoft.com contains the resources shown in the following table. You deploy an Azure Virtual Desktop host pool named Pool1. Pool1 contains 10 session hosts that are joined to Contoso.com. You assign Group1 to the application group in Pool1. You need to identify which users will be able to sign in to the session hosts in Pool1. Which users should you identify?

You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains 10 session hosts. You need to enable screen capture protection on all the session hosts in Pool1. The solution must minimize administrative effort. What should you do?

You have an Azure Virtual Desktop deployment. You need to secure administrative access to session hosts. The solution must require that administrators use the Azure portal to access the session hosts. What should you include in the solution?

You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains session hosts that are joined to a Microsoft Entra Domain Services managed domain. The domain contains a user named User1. You configure AADDC Computers GPO as shown in the following table. You configure AADDC Users GPO as shown in the following table. How long after connecting to a session host will User1 be disconnected?