AZ-140 — questions

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have the following: • A Microsoft 365 E5 tenant • An on-premises Active Directory domain • A hybrid Azure Active Directory (Azure AD) tenant • An Azure Active Directory Domain Services (Azure AD DS) managed domain • An Azure Virtual Desktop deployment The Azure Virtual Desktop deployment contains personal desktops that are hybrid joined to the on-premises domain and enrolled in Microsoft Intune. You need to configure the security settings for the Microsoft Edge browsers on the personal desktops. Solution: You configure a configuration profile in Intune. Does this meet the goal?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have the following: • A Microsoft 365 E5 tenant • An on-premises Active Directory domain • A hybrid Azure Active Directory (Azure AD) tenant • An Azure Active Directory Domain Services (Azure AD DS) managed domain An Azure Virtual Desktop deployment The Azure Virtual Desktop deployment contains personal desktops that are hybrid joined to the on-premises domain and enrolled in Microsoft Intune. You need to configure the security settings for the Microsoft Edge browsers on the personal desktops. Solution: You configure a compliance policy in Intune. Does this meet the goal?

You have an Azure Virtual Desktop deployment that contains multiple host pools. You need to create a PowerShell script to sign users out of a specific session host before you perform a maintenance task. Which PowerShell module should you load in the script?

You have an on-premises network and an Azure subscription. The subscription contains the following: • A virtual network • An Azure Firewall instance • An Azure Virtual Desktop host pool The virtual network connects to the on-premises network by using a site-to-site VPN. You need to ensure that only users from the on-premises network can connect to the Azure Virtual Desktop managed resources in the host pool. The solution must minimize administrative effort. What should you configure?

You have an Azure Virtual Desktop deployment that uses Microsoft 365 cloud services including Microsoft Teams. Users use the Remote Desktop client to connect to the deployment from computers that run Windows 10. You need to support audio and video in Azure Virtual Desktop and provide the users with access to Microsoft Teams calling and meeting features. Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

You have an Azure Virtual Desktop host pool named Pool1 that contains three session hosts. The session hosts are configured to use FSLogix profile containers. You need to configure Cloud Cache on the session hosts. What should you do?

You have an Azure Virtual Desktop deployment. You implement FSLogix profile containers. You need to ensure that the FSLogix profile containers are not used for specific users. What should you do?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have the following: • A Microsoft 365 E5 tenant • An on-premises Active Directory domain • A hybrid Azure Active Directory (Azure AD) tenant • An Azure Active Directory Domain Services (Azure AD DS) managed domain • An Azure Virtual Desktop deployment The Azure Virtual Desktop deployment contains personal desktops that are hybrid joined to the on-premises domain and enrolled in Microsoft Intune. You need to configure the security settings for the Microsoft Edge browsers on the personal desktops. Solution: You configure a Group Policy Object (GPO) in the Azure AD DS managed domain. Does this meet the goal?

You have an Azure Virtual Desktop deployment and the users shown in the following table. All the users plan to use a web browser to access Azure Virtual Desktop resources. Which users can connect to Azure Virtual Desktop by using their preferred browser?

Your on-premises network contains 20 Windows 10 devices. You have an Azure Virtual Desktop deployment. You need to deploy the Microsoft Remote Desktop client (MSRDC) to the devices. The MSRDC must be available to everyone who sign in to the devices. What should you do?

Your network contains an on-premises Active Directory domain named contoso.com. You have an Azure subscription that contains the resources shown in the following table. You need to create a share that will host FSLogix profiles for AVDPool1. The solution must meet the following requirements: * Maximize read and write performance for the profiles. * Control access to the SMB share by using the users and groups stored in contoso.com. Which account should you use to host the share?

Your network contains an on-premises Active Directory domain named contoso.com that syncs to an Azure Active Directory (Azure AD) tenant. You have an Azure Virtual Desktop host pool named Pool1 that has the following settings: * Host pool name: Pool1 * Host pool type: Personal * Number of VMs: 3 The session hosts have the following configurations: * Image used to create the virtual machines: Windows 10 Enterprise8 * Virtual machines domain-joined to: On-premises contoso.com domain You need to ensure that you can use Microsoft EndPoint Manager to manage security updates on the session hosts. What should you do?

You have an Azure Virtual Desktop deployment that contains a host pool. The host pool contains 15 session hosts. All the sessions hosts have FSLogix installed. You need to configure the path to where the user profiles are stored. The solution must minimize administrative effort. Which registry setting should you use?

You have an Azure Virtual Desktop deployment that contains a host pool. The host pool contains 10 session hosts. The session hosts are configured by using a custom image and ephemeral disks. You need to deploy Microsoft OneDrive for Business. Which two actions should you perform for each session host? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

You have an Azure Virtual Desktop deployment that contains a session host named Host1. You need to configure Windows Defender Firewall to allow inbound network traffic for RDP Shortpath on Host1. Which program in the C:\Windows\System32 folder should you specify in the inbound firewall rule?

You have an Azure Virtual Desktop deployment that contains two host pools named Pooll and Pool2. Pool1 contains 10 session hosts and supports 100 concurrent users. Pool2 contains two session hosts and supports 20 concurrent users. You need to recommend an Azure Virtual Desktop update solution that meets the following requirements: • All service updates must be tested before reaching general availability. • Testing must have a minimal impact on the organization. • No new host pools can be created. What should you include in the recommendation?

You have an Azure Virtual Desktop deployment. You plan to create the host pools shown in the following table. You plan to provide external users with access to the session hosts. You need to ensure that connections to Azure Virtual Desktop are licensed by using per-user access pricing. To which host pools will per-user access pricing apply?

You have an Azure Virtual Desktop deployment. You need to add a new application for a RemoteApp application group. The application must be available only during a user session. What should you use as an application source?

You have an Azure subscription that contains an Azure Virtual Desktop deployment. The deployment contains a host pool named Pool. Users access the deployment by using the Windows client for Azure Virtual Desktop. You need to ensure that the users must reauthenticate every eight hours. The solution must minimize administrative effort. What should you do?

You have an Azure Virtual Desktop host pool named Pool1. All the session hosts in Pool1 are assigned private IP addresses only. You need to ensure that administrators can connect remotely to the session hosts. The solution must ensure that the administrators can connect to the session hosts by using Azure Command-Line Interface (CLI) and the Remote Desktop client for Windows. What should you include in the solution?