Microsoft Configuring and Operating Microsoft Azure Virtual Desktop - AZ-140 Exam Practice Test

You have an Azure Virtual Desktop deployment that contains a session host named Host1.
You need to configure Windows Defender Firewall to allow inbound network traffic for RDP Shortpath on Host1.
Which program in the C:\Windows\System32 folder should you specify in the inbound firewall rule?

You have an Azure subscription. The subscription contains 10 Azure Virtual Desktop session hosts that run Windows 10 Enterprise.
You plan to deploy the new Microsoft Teams app to the session hosts.
You need to prepare the session hosts for the deployment.
Which two components should you install? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

One of your friends tells you about the FSLogix and after listening to him, you decide to use it.
Which of the following licenses would you require to use FSLogix?

You have an Azure Virtual Desktop deployment.
In Azure Advisor, you discover the following recommendation related to Azure Virtual Desktop:
Impact: Medium

Description: No validation environment enabled

Potential Benefit: Ensure business continuity through AVD service deployments

Impacted Resource: 1 Host Pool

What can you validate by implementing the recommendations?

You have a hybrid Active Directory Domain Services (AD DS) and Microsoft Entra ID environment that contains 1,000 users.
You plan to deploy Azure Virtual Desktop. The session host virtual machines will be joined to the AD DS domain. Each session host will host five concurrent user sessions that run Microsoft 365 apps.
You need to select the image for the planned Azure Virtual Desktop deployment. The solution must minimize licensing costs.
Which image should you use for the deployment?

Hotspot Question
You have an Azure Virtual Desktop deployment and two Azure Active Directory groups named Group1 and Group2.
You create two Conditional Access policies named Policy1 and Policy2. Policy1 is assigned to Group1. Policy2 is assigned to Group2. Both policies include Azure Virtual Desktop as a cloud app.
You need to meet the following requirements:
- The users in Group1 must be prompted for multi-factor authentication
(MFA) when they connect to Azure Virtual Desktop.
- The users in Group2 must reauthenticate every eight hours while they
are connected to Azure Virtual Desktop.
Which settings should you configure in Policy1 and Policy2? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Case Study 1 - Contoso, Ltd
Overview
Contoso, Ltd. is a law firm that has a main office in Montreal and branch offices in Paris and Seattle. The Seattle branch office opened recently.
Contoso has an Azure subscription and uses Microsoft 365.
Existing Infrastructure. Active Directory
The network contains an on-premises Active Directory domain named contoso.com and an Azure Active Directory (Azure AD) tenant. One of the domain controllers runs as an Azure virtual machine and connects to a virtual network named VNET1. All internal name resolution is provided by DNS server that run on the domain controllers.
The on-premises Active Directory domain contains the organizational units (OUs) shown in the following table.

The on-premises Active Directory domain contains the users shown in the following table.

The Azure AD tenant contains the cloud-only users shown in the following table.

Existing Infrastructure. Network Infrastructure
All the Azure virtual networks are peered. The on-premises network connects to the virtual networks.
All servers run Windows Server 2019. All laptops and desktop computers run Windows 10 Enterprise.
Since users often work on confidential documents, all the users use their computer as a client for connecting to Remote Desktop Services (RDS).
In the West US Azure region, you have the storage accounts shown in the following table.

Existing Infrastructure. Remote Desktop Infrastructure
Contoso has a Remote Desktop infrastructure shown in the following table.

Requirements. Planned Changes
Contoso plans to implement the following changes:
- Implement FSLogix profile containers for the Paris offices.
- Deploy a Azure Virtual Desktop host pool named Pool4.
- Migrate the RDS deployment in the Seattle office to Azure Virtual
Desktop in the West US Azure region.
Requirements. Pool4 Configuration
Pool4 will have the following settings:
- Host pool type: Pooled
- Max session limit: 7
- Load balancing algorithm: Depth-first
- Images: Windows 10 Enterprise multi-session
- Virtual machine size: Standard D2s v3
- Name prefix: Pool4
- Number of VMs: 5
- Virtual network: VNET4
Requirements. Technical Requirements
Contoso identifies the following technical requirements:
- Before migrating the RDS deployment in the Seattle office, obtain the recommended deployment configuration based on the current RDS utilization.
- For the Azure Virtual Desktop deployment in the Montreal office,
disable audio output in the device redirection settings.
- For the Azure Virtual Desktop deployment in the Seattle office, store the FSLogix profile containers in Azure Storage.
- Enable Operator2 to modify the RDP Properties of the Azure Virtual
Desktop deployment in the Montreal office.
- From a server named Server1, convert the user profile clicks to the
FSLogix profile containers.
- Ensure that the Pool1 virtual machines only run during business
hours.
- Use the principle of least privilege.
You plan to implement the FSLogix profile containers for the Seattle office.
Which storage account should you use?

You have an Azure Virtual Desktop deployment that contains a pooled host pool named Pool1.
Pool1 contains five session hosts.
You plan to deploy two apps named App1 and App2. The solution must meet the following requirements:
- All the session hosts must contain both apps.
- All users must connect to a full desktop session.
- Only users in the sales department must be able to use App1.
- Only users in the research department must be able to use App2.
You need to ensure that the users in each department can see only their assigned app when they connect to Pool1.
What should you use?

You have an Azure Virtual Desktop host pool named HostPool1. HostPool1 contains Windows 10 session hosts and the application groups shown in the following table.

You need to assign an instance of a Windows 11 Desktop application group to users.
What should you do first?

Drag and Drop Question
You have an Azure subscription that contains a Bicep file named AVD.bicep.
You plan to use AVD.bicep to deploy Azure Virtual Desktop.
Which commands should you run in sequence? To answer, drag the appropriate commands to the correct order. Each command may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have the following:
A Microsoft 365 E5 tenant

An on-premises Active Directory domain

A hybrid Azure Active Directory (Azure AD) tenant

An Azure Active Directory Domain Services (Azure AD DS) managed domain

An Azure Virtual Desktop deployment

The Azure Virtual Desktop deployment contains personal desktops that are hybrid joined to the on-premises domain and enrolled in Microsoft Intune.
You need to configure the security settings for the Microsoft Edge browsers on the personal desktops.
Solution: You configure a Group Policy Object (GPO) in the Azure AD DS managed domain.
Does this meet the goal?

You have a Azure Virtual Desktop host pool named Pool1.
You are troubleshooting an issue for a Remote Desktop client that stopped responding.
You need to restore the default Remote Desktop client settings and unsubscribe from all workspaces.
Which command should you run?