AZ-140 — questions

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure Virtual Desktop host pool that runs Windows 10 Enterprise multi-session. User sessions are load-balanced between the session hosts. Idle session timeout is 30 minutes. You plan to shut down a session host named Host1 to perform routine maintenance. You need to prevent new user sessions to Host1 without disconnecting active user sessions. Solution: From the properties of the virtual machine of Host1, you enable just-in-time (JIT) VM access. Does this meet the goal?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure Virtual Desktop host pool that runs Windows 10 Enterprise multi-session. User sessions are load-balanced between the session hosts. Idle session timeout is 30 minutes. You plan to shut down a session host named Host1 to perform routine maintenance. You need to prevent new user sessions to Host1 without disconnecting active user sessions. Solution: From the host pool, you remove Host1 from the session host list. Does this meet the goal?

You have an Azure Virtual Desktop deployment. You plan to implement the Start/Stop VMs during off-hours feature. You need to ensure that you can stop the session hosts automatically based on the CPU utilization. What should you do on the session hosts?

You have an Azure Virtual Desktop host pool in the East US region. You need to implement a disaster recovery solution that meets the following requirements: • If users cannot connect to the Azure Virtual Desktop resources in the East US region, the users must be able to connect to the equivalent resources in the West US region. • Users must connect to the Azure Virtual Desktop resources in either the East US or the West US region by selecting a single icon in the Remote Desktop clientׁ • In the event of a disaster, failover between the Azure regions must be initiated manually by an administrator. • Failover times must be minimized. What should you do?

You have an Azure Virtual Desktop deployment. You need to monitor the deployment by using the Azure Virtual Desktop Insights solution in Azure Monitor. What should you use as the Diagnostic settings destination for the host pool?

You have an Azure Virtual Desktop deployment. In Azure Advisor, you discover the following recommendation related to Azure Virtual Desktop: • Impact: Medium • Description: No validation environment enabled • Potential Benefit: Ensure business continuity through AVD service deployments • Impacted Resource: 1 Host Pool What can you validate by implementing the recommendations?

You have an Azure Virtual Desktop host pool. You add a French language pack to each session host in the host pool. Several days later, users report that English displays when they connect to Azure Virtual Desktop. After an investigation, you discover that the French language pack was removed, and the session hosts reverted to English. You need to ensure that the French language pack is always available on the session hosts. What should you do?

Your network contains an on-premises Active Directory domain named contoso.com that syncs to an Azure Active Directory (Azure AD) tenant. You have an Azure Virtual Desktop host pool named Pool1 that has the following settings: • Host pool name: Pool1 • Host pool type: Personal • Load balancing algorithm: Breadth-first Number of VMs: 3 - The session hosts have the following configurations: • Image used to create the virtual machines: Windows 10 Enterprise • Virtual machines domain-joined to: On-premises contoso.com domain You need to ensure that you can use Microsoft EndPoint Manager to manage security update on the session hosts. What should you do?

You have an Azure subscription that contains the resources shown in the following table. You create a recovery services vault named Vault1. Which resources can you back up using Azure Backup to Vault1?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure Virtual Desktop host pool that runs Windows 10 Enterprise multi-session. User sessions are load-balanced between the session hosts. Idle session timeout is 30 minutes. You plan to shut down a session host named Host1 to perform routine maintenance. You need to prevent new user sessions to Host1 without disconnecting active user sessions. Solution: From the properties of the virtual machine of Host1, you configure the Auto-shutdown settings. Does this meet the goal?

You have an Azure subscription that contains the resources shown in the following table. You need to ensure that users can restore files saved to their FSLogix profile. What should you do?

You have an Azure subscription. The subscription contains a virtual machine named Server1 that runs Windows Server and is deployed to the West US Azure region. You deploy a new Azure Virtual Desktop host pool named HostPool1 to the East US Azure region. You need to ensure that all the traffic between HostPool1 and Server1 is routed via the Microsoft backbone network. What should you use?

You have an Azure Virtual Desktop deployment that contains the host pools shown in the following table. You need to create a disaster recovery environment in the West US region. The solution must minimize costs and administrative effort. What should you do?

You have an Azure Virtual Desktop deployment. You plan to deploy Update Management to manage automated updates for server-based session hosts. You need to configure the prerequisites for Update Management. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

You have an Azure subscription named Subscription that contains an Azure Virtual Desktop host pool named HostPool1. HostPool1 is managed by using Microsoft Intune. Subscription1 contains 50 users that connect to HostPool1 by using computers that run Windows 10. You need to prevent the users from copying files between an Azure Virtual Desktop session and the computers. The solution must minimize administrative effort. What should you do?

You have an Azure Virtual Desktop deployment. You plan to create a new host pool named Pool1 that will contain five Windows 11 session hosts. You need to enable secure boot and vTPM on the session hosts. How should you configure the Virtual Machines settings?

You have an Azure Virtual Desktop pooled host pool named HostPool1. You need to dynamically allocate resources to HostPool1 based on the number of sessions for each host. What should you create?

You have an Azure Virtual Desktop personal host pool named Pool1 that contains 20 Azure AD-joined session hosts. You need to ensure that only approved virtual machine extensions are installed on the Pool 1 session hosts. The solution must minimize administrative effort. What should you use?

Case study - This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided. To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study. At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section. To start the case study - To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question. Overview - Contoso, Ltd. is a law firm that has a main office in Montreal and branch offices in Paris and Seattle. The Seattle branch office opened recently. Contoso has an Azure subscription and uses Microsoft 365. Existing Infrastructure. Active Directory The network contains an on-premises Active Directory domain named contoso.com and an Azure Active Directory (Azure AD) tenant. One of the domain controllers runs as an Azure virtual machine and connects to a virtual network named VNET1. All internal name resolution is provided by DNS server that run on the domain controllers. The on-premises Active Directory domain contains the organizational units (OUs) shown in the following table. The on-premises Active Directory domain contains the users shown in the following table. The Azure AD tenant contains the cloud-only users shown in the following table. Existing Infrastructure. Network Infrastructure All the Azure virtual networks are peered. The on-premises network connects to the virtual networks. A virtual network named VNET4 was recently created are peered to the other virtual networks. VNET4 does NOT contain any AVD virtual machines. All servers run Windows Server 2019. All laptops and desktop computers run Windows 10 Enterprise. Since users often work on confidential documents, all the users use their computer as a client for connecting to Remote Desktop Services (RDS). In the West US Azure region, you have the storage accounts shown in the following table. Existing Infrastructure. Remote Desktop Infrastructure Contoso has a Remote Desktop infrastructure shown in the following table. Requirements. Planned Changes - Contoso plans to implement the following changes: • Implement FSLogix profile containers for the Paris offices. • Deploy an Azure Virtual Desktop host pool named Pool4. • Migrate the RDS deployment in the Seattle office to Azure Virtual Desktop in the West US Azure region. Requirements. Pool4 Configuration Pool4 will have the following settings: • Host pool type: Pooled • Max session limit: 7 • Load balancing algorithm: Depth-first • Images: Windows 10 Enterprise multi-session • Virtual machine size: Standard D2s v3 • Name prefix: Pool4 • Number of VMs: 5 • Virtual network: VNET4 Requirements. Technical Requirements Contoso identifies the following technical requirements: • Before migrating the RDS deployment in the Seattle office, obtain the recommended deployment configuration based on the current RDS utilization. • For the Azure Virtual Desktop deployment in the Montreal office, disable audio output in the device redirection settings. • For the Azure Virtual Desktop deployment in the Seattle office, store the FSLogix profile containers in Azure Storage. • Enable Operator2 to modify the RDP Properties of the Azure Virtual Desktop deployment in the Montreal office. • From a server named Server1, convert the user profile disks to the FSLogix profile containers. • Ensure that the Pool1 virtual machines only run during business hours. • Use the principle of least privilege. You need to configure the virtual machines that have the Pool1 prefix. The solution must meet the technical requirements. What should you use?

You have an Azure Virtual Desktop deployment that contains two Azure regions. You plan to implement a disaster recovery solution for user profiles. The solution must meet the following requirements: • Users must retain their user profiles if a single region fails. • Administrative effort must be minimized. What should you include in the recommendation?