Practice Free AZ-140 Exam Online Questions

Your company has a single office and has 40 employees.

You ate planning a Azure Virtual Desktop deployment.

The estimated user workloads are shown in the following table.

Half the users of each workload type work from home. All the users who work from home do NOT establish a VPN connection to the office.

Approximately how much bandwidth is needed between the office and Azure lo support the planned workloads?

Reveal Solution Hide Solution

HOTSPOT

Your company has the offices shown in the following table.

The company has an Azure Active Directory (Azure AD) tenant named contoso.com that contains a user named User1.

Users connect to a Windows Virtual Desktop deployment named WVD1. WVD1 contains session hosts that have public IP addresses from the 52.166.253.0/24 subnet.

Contoso.com has a conditional access policy that has the following settings:

– Name: Policy1

– Assignments:

– Users and groups: User1

– Cloud apps or actions: Windows Virtual Desktop

– Access controls:

– Grant: Grant access, Require multi-factor authentication

– Enable policy: On

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Correct Answer:

Explanation:

Based on the provided information, there’s a conditional access policy (Policy1) in place that requires User1 to complete multi-factor authentication (MFA) when accessing Windows Virtual Desktop (WVD1). The policy is currently enabled and applies specifically to User1 for the cloud app or action ‘Windows Virtual Desktop’.

Let’s examine each statement:

If User1 connects to Windows Virtual Desktop from the office in Boston, User1 is prompted for multi-factor authentication (MFA).

Since the policy does not specify any conditions related to network locations or trusted IPs, it will apply regardless of where User1 is connecting from. Therefore, User1 will be prompted for MFA when accessing WVD1 from the office in Boston.

Answer. Yes

If User1 connects to Windows Virtual Desktop from home, User1 is prompted for multi-factor authentication (MFA).

Similar to the above, the policy does not differentiate between different network locations. Therefore, whether User1 is at home or in the office, they will be prompted for MFA when accessing WVD1.

Answer. Yes

If User1 connects to Microsoft Exchange Online from a Windows Virtual Desktop session, User1 is prompted for multi-factor authentication (MFA).

The conditional access policy is specified for Windows Virtual Desktop and does not mention other cloud apps or actions, such as Microsoft Exchange Online. If User1 is already in a WVD session and then accesses Exchange Online, the prompt for MFA would depend on any other conditional access policies that apply to Exchange Online, not the one specified for WVD1. Without information on policies applying to Exchange Online, the assumption would be that MFA is not prompted again if User1 is already authenticated to the session.

Answer. No

You have a Windows Virtual Desktop host pool named Pool1.

You are troubleshooting an issue for a Remote Desktop client that stopped responding.

You need to restore the default Remote Desktop client settings and unsubscribe from all workspaces.

Which command should you run?

Reveal Solution Hide Solution

HOTSPOT –

You have an Azure Virtual Desktop host pool named HostPool1 that contains 20 session hosts.

You create a new scaling plan that has the Ramp-up settings shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Correct Answer:

You deploy multiple Windows Virtual Desktop session hosts that have only private IP addresses. You need to ensure that administrators can initiate an RDP session to the session hosts by using the Azure portal.

What should you implement?

Reveal Solution Hide Solution

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Virtual Desktop host pool that runs Windows 10 Enterprise multi-session.

User sessions are load-balanced between the session hosts. Idle session timeout is 30 minutes.

You plan to shut down a session host named Host1 to perform routine maintenance.

You need to prevent new user sessions to Host1 without disconnecting active user sessions.

Solution: From the properties of the virtual machine of Host1, you enable just-in-time (JIT) VM access.

Does this meet the goal?

Reveal Solution Hide Solution

You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. You plan to create a Windows 10 image named Image1 to deploy new session hosts to Pool1.

You need to ensure that all the new session hosts deployed by using Image1 are onboarded to Microsoft Defender for Endpoint.

What should you do?

Reveal Solution Hide Solution

HOTSPOT

You have an Azure subscription that contains a user named User1.

The subscription uses the Azure Virtual Desktop host pools shown in the following table.

You need to ensure that User1 can create RemoteApp app groups that will be used to stream a suite of custom apps from the host pools.

The solution must meet the following requirements:

• The apps must be available to the users in all the pools.

• The principle of least privilege must be followed.

• Administrative effort must be minimized.

Which role should you assign to User1, and what is the minimum number of app groups that User1 should create? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Correct Answer:

Explanation:

To ensure that User1 can create RemoteApp app groups that will be used to stream a suite of custom apps from the host pools, while adhering to the principle of least privilege and minimizing administrative effort, the following should be considered:

Role: User1 needs to have the ability to create and manage app groups. The "Desktop Virtualization Application Group Contributor" role would allow User1 to create and manage application groups within Azure Virtual Desktop. This role is specific enough to adhere to the principle of least privilege while allowing User1 to perform the necessary tasks.

Number of app groups: Since the apps must be available to users in all pools, and to minimize administrative effort, User1 should create a single app group that contains the suite of custom apps. This app group can then be associated with each host pool. This way, there is only one set of apps to manage across all host pools, which simplifies administration.

Therefore, the correct answers are:

Role: Desktop Virtualization Application Group Contributor

Number of app groups: 1

DRAG DROP

You have an Azure Virtual Desktop deployment.

You plan to create a new host pool that meets the following requirements:

• Supports up to 25 user connections

• Contains 10 Windows 11 multi-session hosts

• Evenly distributes user sessions across the session hosts

You need to recommend which type of host pool and load-balancing algorithm to use.

What should you recommend? To answer, drag the appropriate options to the correct targets. Each option may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Correct Answer:

Explanation:

Pooled

Breath-first

You have an Azure Virtual Desktop deployment that contains a host pool. The host pool contains 15 session hosts. All the sessions hosts have FSLogix installed.

You need to configure the path to where the user profiles are stored. The solution must minimize administrative effort.

Which registry setting should you use?

Reveal Solution Hide Solution