Free AZ-140 Sample Questions — Configuring and Operating Windows Virtual Desktop on Microsoft Azure

You have an Azure Virtual Desktop deployment. You need to implement FSLogix to host user profiles in an Azure Storage account by using Azure file shares. The solution must meet the following requirements: • Access to a session host must be allowed only if the user profile is available from the storage account. • Local profiles must NOT be created on the session hosts. Which FSLogix registry setting should you use?

• A. NoProfileContainingFolder
• B. PreventLoginWithFailure
• C. ProfileType
• D. DeleteLocalProfileWhenVHDShouldApply

You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains 10 session hosts that were deployed by using an Azure Resource Manager (ARM) template. You discover that Windows licenses were NOT applied to the session hosts. You need to use a PowerShell script to update the licenses. Which cmdlet should you include in the solution?

• A. Update-AzVm
• B. Update-AzWvdDesktop
• C. Update-AzWvdHostPool
• D. Update-AzWvdWorkspace
• E. Update-AzWvdSessionHost

You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains five Windows 11 session hosts. You need to identify which Azure Virtual Desktop client app versions are used to connect to the session hosts in Pool1. What should you use?

• A. Applications insights
• B. Azure Virtual Desktop Insights
• C. Insights for virtual machines
• D. Insights for Pool1

You have a hybrid Azure Active Directory (Azure AD) tenant. You plan to deploy an Azure Virtual Desktop personal host pool. The host pool will contain 15 virtual machines that run Windows 10 Enterprise. The virtual machines will be joined to the on-premises Active Directory domain and used by the members of a domain group named Department1. You need to ensure that each user is added automatically to the local Administrators group on the virtual machine to which the user signs in. What should you configure?

• A. a role assignment for the host pool
• B. a role assignment for each virtual machine
• C. a policy preference in a Group Policy Object (GPO)
• D. a device setting in Azure AD

You have an Azure Virtual Desktop deployment. You plan to create a new host pool named Pool1 that will contain five Windows 11 session hosts. You need to enable secure boot and vTPM on the session hosts. How should you configure the Virtual Machines settings?

• A. Enable encryption at rest and a platform-managed key
• B. Set Security type to Trusted launch virtual machines
• C. Enable a system-assigned managed identity
• D. Set Network security group to Advanced

You have an Azure subscription. You need to deploy an Azure Virtual Desktop host pool that will contain 20 Windows 11 session hosts. The solution must meet the following requirements: • Each session host must have a Windows client license applied. • Administrative effort must be minimized. What should you use to deploy the session hosts?

• A. the Azure portal
• B. Microsoft Intune
• C. Windows Autopilot
• D. an Azure Automation runbook

You plan to deploy Azure Virtual Desktop. The deployment will use existing virtual machines. You create a Azure Virtual Desktop host pool. You need to ensure that you can add the virtual machines to the host pool. What should you do first?

• A. Register the Microsoft.DesktopVirtualization provider
• B. Generate a registration key
• C. Run the Invoke-AzVMRunCommand cmdlet
• D. Create a role assignment

You have an Azure Virtual Desktop deployment. You need to secure administrative access to session hosts. The solution must require that administrators use the Azure portal to access the session hosts. What should you include in the solution?

• A. Azure Firewall
• B. Azure Bastion
• C. Conditional Access policies
• D. Microsoft Defender for Cloud

You have an Azure Virtual Desktop deployment that contains the following: ✑ A host pool named Pool1 ✑ Two session hosts named Host1 and Host2 ✑ An application group named RemoteAppGroup1 that contains a RemoteApp named App1 You need to prevent users from copying and pasting between App1 and their local device. What should you do?

• A. Create an AppLocker policy
• B. Modify the locks of RemoteAppGroup1
• C. Assign the Desktop Virtualization Reader role for Pool1 to the users
• D. Modify the RDP Properties of Pool1

You have an Azure Virtual Desktop pooled host pool named HostPool1. You need to dynamically allocate resources to HostPool1 based on the number of sessions for each host. What should you create?

• A. a load balancer rule
• B. a scaling plan
• C. a virtual machine scale set
• D. an availability set

You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains two session hosts. You create a new virtual machine named Host3 that runs Windows 11. You need to add Host3 as a third session host to Pool1. What should you do first?

• A. Generate a registration key
• B. Assign a scaling plan to Pool1
• C. Generate a certificate for Host3
• D. Deallocate the existing session hosts

You deploy multiple Azure Virtual Desktop session hosts that have only private IP addresses. You need to ensure that administrators can initiate an RDP session to the session hosts by using the Azure portal. What should you implement?

• A. Remote Desktop Connection Broker (RD Connection Broker)
• B. Azure Application Gateway
• C. Azure Bastion
• D. Remote Desktop Session Host (RD Session Host)

You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains three session hosts. You need to implement a private endpoint connection for Pool. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

• A. Create a private endpoint by using the global target sub-resource
• B. Reregister the Microsoft.VirtualMachineImages resource provider for the Azure subscription
• C. Reregister the Microsoft.DesktopVirtualization resource provider for the Azure subscription
• D. Create a private endpoint by using the connection target sub-resource
• E. Create a private endpoint by using the feed target sub-resource

Your on-premises network contains an Active Directory domain that syncs with a Microsoft Entra tenant. You have a new Azure virtual network named VNet1. You plan to implement an Azure Virtual Desktop host pool named Pool1. The session hosts in Pool will be joined to the Active Directory domain. You need to recommend a networking solution for connectivity between Azure Virtual Desktop and the on-premises network. Which three resources should you include in the recommendation? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

• A. a public load balancer
• B. a local network gateway
• C. a VNet-to-VNet connection type
• D. a Site-to-site (IPSec) connection type
• E. a virtual network gateway
• F. a public IP address for every session host

You have an Azure Virtual Desktop host pool named Pool1. You are troubleshooting an issue for a Remote Desktop client that stopped responding. You need to restore the default Remote Desktop client settings and unsubscribe from all workspaces. Which command should you run?

• A. msrdcw
• B. resetengine
• C. mstsc
• D. resetpluginhost

You have an Azure Virtual Desktop deployment. You need to add a new application for a RemoteApp application group. The application must be available only during a user session. What should you use as an application source?

• A. FSLogix Profile Container
• B. file path
• C. start menu
• D. app attach

You need to ensure the resiliency of the user profiles for the Boston office users. The solution must meet the user performance requirements. What should you do?

• A. Modify the Account kind setting of storage1
• B. Modify the replication settings of storage1
• C. Implement Azure Site Recovery
• D. Configure Cloud Cache

Your on-premises network contains 20 Windows 10 devices. You have an Azure Virtual Desktop deployment. You need to deploy the Microsoft Remote Desktop client (MSRDC) to the devices. The MSRDC must be available to everyone who sign in to the devices. What should you do?

• A. Install the MSRDC by using msiexec.exe and the ALLUSERS=1 command line option
• B. Install the MSRDC by using msiexec.exe and the ALLUSERS=2 command line option
• C. Install the MSRDC by using msiexec.exe and the MSIINSTALLPERUSER=1 command line option

You have an Azure Virtual Desktop deployment. You use Hyper-V to create a virtual machine that runs Windows 11 and has the following configurations: • Virtual machine generation: Generation 2 • Disk type: Dynamically expanding • Disk format: VHDX • Disk size: 2 TB You need to prepare the virtual machine before uploading it to Azure. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

• A. Decrease the disk size to 1 TB
• B. Change the disk type to fixed
• C. Change the disk type to differencing
• D. Change the disk format to VHD
• E. Change the virtual machine generation to generation 1

You have an on-premises network and an Azure subscription. The subscription contains the following: ✑ A virtual network ✑ An Azure Firewall instance ✑ An Azure Virtual Desktop host pool The virtual network connects to the on-premises network by using a site-to-site VPN. You need to ensure that only users from the on-premises network can connect to the Azure Virtual Desktop managed resources in the host pool. The solution must minimize administrative effort. What should you configure?

• A. a conditional access policy
• B. an Azure Firewall rule
• C. a network security group (NSG) rule
• D. a user-defined route