AZ-140 Sample Questions Answers

-

Your on-premises network contains an Active Directory domain named fabrikam.com that syncs with Azure Active Directory (Azure AD). The domain contains a global group named AVDusers.

You have an Azure subscription that contains the resources shown in the following table.

All Azure Virtual Desktop users are members of the AVDusers group.

You plan to create FSLogix profile containers in Profiles1.

You need to configure Profiles1 and fabrikam.com to ensure that the HostPool1 sessions hosts can access the FSLogix profile containers.

What should you do? To answer, drag the appropriate configurations to the correct targets. Each configuration may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

You have a Windows Virtual Desktop deployment.

Many users have iOS devices that have the Remote Desktop Mobile app installed.

You need to ensure that the users can connect to the feed URL by using email discovery instead of entering the feed URL manually.

How should you configure the _msradc DNS record? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an Azure Virtual Desktop deployment that has just-in-time (JIT) VM access enabled.

You need to request access to a session host by using JIT VM access.

Which three virtual machine settings can you use to request access? To answer, select the appropriate settings in the answer area.

NOTE: Each selection is worth one point.

You have an Azure subscription named Subscription that contains an Azure Virtual Desktop host pool named HostPool1.

HostPool1 is managed by using Microsoft Intune. Subscription1 contains 50 users that connect to HostPool1 by using computers that run Windows 10.

You need to prevent the users from copying files between an Azure Virtual Desktop session and the computers. The solution must minimize administrative effort.

What should you do?

You have an Azure Active Directory (Azure AD) tenant named contoso.com.

You use a user account named Admin1 to deploy an Azure Active Directory Domain Services (Azure AD DS) managed domain named aaddscontoso.com to a virtual network named VNET1.

You plan to deploy an Azure Virtual Desktop host pool named Pool1 to VNET1.

You need to ensure that you can use the Admin1 user account to deploy Windows 10 Enterprise session hosts to Pool1.

What should you do first?

You have an Azure subscription that contains the resources shown in the following table.

You have a virtual machine named Server1 that runs Windows Server and is connected to VNet3.

You need to deploy the Azure Virtual Desktop host pools shown in the following table.

The solution must meet the following requirements:

• The session hosts in Pool1 must access Server1 via the Microsoft backbone network.

• The session hosts in Pool2 must access storage1 via the Microsoft backbone network.

What should you configure on the virtual networks? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an Azure Virtual Desktop deployment.

You need to create a host pool. The solution must ensure that during periods of tow CPU usage, credits can be accumulated, and then used to raise performance above the purchased baseline during periods of high CPU usage.

Which virtual machine series should you specify when you create the pool?

You need to recommend a DNS infrastructure that meet the performance requirements. What should you recommend? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

You need to recommend an authentication solution that meets the performance requirements.

Which two actions should you include in the recommendation? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

You need to configure a conditional access policy to meet the authentication requirements.

What should you include in the policy configuration? To answer, select the appropriate options in the answer area.

NOTE Each correct selection is worth one point.

You need to deploy the session hosts to meet the deployment requirements Which PowerShell cmdlel should you run first?

You need to ensure that you can implement user profile shares for the Boston office users. The solution must meet the user profile requirements.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Which two roles should you assign to Admin2 to meet the security requirements? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

You need to implement network security to meet the security requirements and the performance requirements.

Which two actions should you perform? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

You need to modify the custom virtual machine images to meet the deployment requirements.

What should you install?

Which setting should you modify for VNET4 before you can deploy Pool4?

You need to ensure the resiliency of the user profiles for the Boston office users. The solution must meet the user performance requirements.

What should you do?

Which users can create Pool4, and which users can join session hosts to the domain? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You plan to implement the FSLogix profile containers for the Seattle office.

Which storage account should you use?

You need to configure the device redirection settings. The solution must meet the technical requirements.

Where should you configure the settings?

Which three PowerShell modules should you install on Server1 to meet the technical requirements? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

You need to evaluate the RDS deployment in the Seattle office. The solution must meet the technical requirements.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Which role should you assign to Operator2 to meet the technical requirements?

You are planning the deployment of Pool4.

What will be the maximum number of users that can connect to Pool4, and how many session hosts are needed to support five concurrent user sessions? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You need to configure the virtual machines that have the Pool1 prefix. The solution must meet the technical requirements.

What should you use?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have the following:

• A Microsoft 365 E5 tenant
• An on-premises Active Directory domain
• A hybrid Azure Active Directory (Azure AD) tenant
• An Azure Active Directory Domain Services (Azure AD DS) managed domain
• An Azure Virtual Desktop deployment

The Azure Virtual Desktop deployment contains personal desktops that are hybrid joined to the on-premises domain and enrolled in Microsoft Intune.

You need to configure the security settings for the Microsoft Edge browsers on the personal desktops.

Solution: You create and configure a Group Policy Object (GPO) in the on-premises domain.

Does this meet the goal?

Note: This question is part of a series of questions that present the same scenario. Each question in

the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these

questions will not appear in the review screen.

You have a Windows Virtual Desktop host pool that contains five session hosts. The session hosts run

Windows 10 Enterprise multi-session.

You need to prevent users from accessing the internet from Windows Virtual Desktop sessions. The session hosts must be allowed to access all the required Microsoft services.

Solution: You configure the Address space settings of the virtual network that contains the session hosts.

Does that meet the goal?

You have an Azure Virtual Desktop deployment that uses Azure Active Directory Domain Services (Azure AD DS). You have the following host pool:

• Name: Pool1

• Type: Personal

• Number of session hosts: 5

You plan to deploy two new session hosts to Pool1. What should you do before you deploy the session hosts?

You have a hybrid Azure Active Directory (Azure AD) tenant.

You plan to deploy an Azure Virtual Desktop personal host pool. The host pool will contain 15 virtual machines that run Windows 10 Enterprise. The virtual machines will be joined to the on-premises Active Directory domain and used by the members of a domain group named Department1.

You need to ensure that each user is added automatically to the local Administrators group on the virtual machine to which the user signs in.

What should you configure?

You have an Azure subscription that contains the resources shown in the following table.

You need to ensure that users can restore files saved to their FSLogix profile.

What should you do?

You have a Windows Virtual Desktop host pool.

You need to install Microsoft Antimalware for Azure on the session hosts.

What should you do?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a W indows Virtual Desktop host pool named Pool1 that is integrated with an Azure Active Directory Domain Services (Azure AD DS) managed domain.

You need to configure idle session timeout settings for users that connect to the session hosts in Pool1.

Solution: From an Azure AD DS-joined computer, you modify the AADDC Computer GPO settings.

Does that meet the goal?

You have an Azure subscription named Subscription1 that contains the users shown in the following table.

Subscription1 contains the Azure Virtual Desktop host pools shown in the following table.

Subscription1 contains the Azure Virtual Desktop application groups shown in the following table.

You perform the role assignments shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area: