Microsoft Configuring and Operating Microsoft Azure Virtual Desktop - AZ-140 Exam Practice Test

Case Study 1 - Contoso, Ltd
Overview
Contoso, Ltd. is a law firm that has a main office in Montreal and branch offices in Paris and Seattle. The Seattle branch office opened recently.
Contoso has an Azure subscription and uses Microsoft 365.
Existing Infrastructure. Active Directory
The network contains an on-premises Active Directory domain named contoso.com and an Azure Active Directory (Azure AD) tenant. One of the domain controllers runs as an Azure virtual machine and connects to a virtual network named VNET1. All internal name resolution is provided by DNS server that run on the domain controllers.
The on-premises Active Directory domain contains the organizational units (OUs) shown in the following table.

The on-premises Active Directory domain contains the users shown in the following table.

The Azure AD tenant contains the cloud-only users shown in the following table.

Existing Infrastructure. Network Infrastructure
All the Azure virtual networks are peered. The on-premises network connects to the virtual networks.
All servers run Windows Server 2019. All laptops and desktop computers run Windows 10 Enterprise.
Since users often work on confidential documents, all the users use their computer as a client for connecting to Remote Desktop Services (RDS).
In the West US Azure region, you have the storage accounts shown in the following table.

Existing Infrastructure. Remote Desktop Infrastructure
Contoso has a Remote Desktop infrastructure shown in the following table.

Requirements. Planned Changes
Contoso plans to implement the following changes:
- Implement FSLogix profile containers for the Paris offices.
- Deploy a Azure Virtual Desktop host pool named Pool4.
- Migrate the RDS deployment in the Seattle office to Azure Virtual
Desktop in the West US Azure region.
Requirements. Pool4 Configuration
Pool4 will have the following settings:
- Host pool type: Pooled
- Max session limit: 7
- Load balancing algorithm: Depth-first
- Images: Windows 10 Enterprise multi-session
- Virtual machine size: Standard D2s v3
- Name prefix: Pool4
- Number of VMs: 5
- Virtual network: VNET4
Requirements. Technical Requirements
Contoso identifies the following technical requirements:
- Before migrating the RDS deployment in the Seattle office, obtain the recommended deployment configuration based on the current RDS utilization.
- For the Azure Virtual Desktop deployment in the Montreal office,
disable audio output in the device redirection settings.
- For the Azure Virtual Desktop deployment in the Seattle office, store the FSLogix profile containers in Azure Storage.
- Enable Operator2 to modify the RDP Properties of the Azure Virtual
Desktop deployment in the Montreal office.
- From a server named Server1, convert the user profile clicks to the
FSLogix profile containers.
- Ensure that the Pool1 virtual machines only run during business
hours.
- Use the principle of least privilege.
You plan to implement the FSLogix profile containers for the Seattle office.
Which storage account should you use?

You have an Azure Virtual Desktop deployment.
You need to monitor the deployment by using the Azure Virtual Desktop Insights solution in Azure Monitor.
What should you use as the Diagnostic settings destination for the host pool?

You have an Azure Virtual Desktop personal host pool named Pool1 that contains 20 Azure AD- joined session hosts.
You need to ensure that only approved virtual machine extensions are installed on the Pool 1 session hosts. The solution must minimize administrative effort.
What should you use?

You network contains an on-premises Active Directory domain. The domain contains a universal security group named WVDusers.
You have a hybrid Azure Active Directory (Azure AD) tenant. WVDusers syncs to Azure AD.
You have a Azure Virtual Desktop host pool that contains four Windows 10 Enterprise multi- session hosts.
You need to ensure that only the members of WVDusers can establish Azure Virtual Desktop sessions to the host pool.
What should you do?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have the following:
- A Microsoft 365 E5 tenant
- An on-premises Active Directory domain
- A hybrid Azure Active Directory (Azure AD) tenant
- An Azure Active Directory Domain Services (Azure AD DS) managed
domain
- An Azure Virtual Desktop deployment
The Azure Virtual Desktop deployment contains personal desktops that are hybrid joined to the on-premises domain and enrolled in Microsoft Intune.
You need to configure the security settings for the Microsoft Edge browsers on the personal desktops.
Solution: You create and configure a Group Policy Object (GPO) in the on-premises domain.
Does this meet the goal?

Hotspot Question
You are planning an Azure Virtual Desktop deployment that must support both internal and external users.
You need to recommend how many Azure subscriptions to add to the deployment, and what to assign to each type of user. The solution must minimize costs.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Hotspot Question
You have an Azure subscription that contains an Azure Virtual Desktop deployment. The deployment contains two session hosts.
You need to enable Azure Virtual Desktop Insights for the deployment.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Hotspot Question
You have an Azure subscription that contains two users named User1 and User2 and an Azure Virtual Desktop host pool named Pool1. Pool1 has a RemoteApp application group named AG1.
User1 is assigned the Desktop Virtualization Application Group Contributor role.
You need to ensure that User1 can assign users to AG1, and User2 can sign out disconnected users from Pool1. The solution must follow the principle of least privilege.
Which role should you assign to each user? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Case Study 3 - Northwind Traders
Overview
Northwind Traders is a manufacturing company based in New York City.
Existing Environment
Identity Environment
The on-premises network contains an Active Directory Domain Services (AD DS) domain named northwindtraders.com.
Northwind Traders has a Microsoft Entra tenant and a Microsoft Entra Domain Services managed domain. The northwindtraders.com domain syncs with the Microsoft Entra tenant.
Virtual Machines
The company has an on-premises Hyper-V virtual machine named VM1 that has the following configurations:
- Generation: 1
- Disk size: 2 TB
- Disk format: VHDX
- Disk type: Dynamically expanding
Cloud Services
Northwind Traders has a Microsoft 365 E5 subscription. The subscription contains 500 users that are assigned Microsoft 365 E5 licenses.
The company has an Azure subscription that contains the resources shown in the following table.

Both subscriptions are linked to the Microsoft Entra tenant.
Requirements
Planned Changes
Northwind Traders identifies the following planned changes:
- Deploy an Azure Virtual Desktop host pool that will contain 10 session hosts joined to the Microsoft Entra Domain Services managed domain.
- Configure VM1 as the source image for the Azure Virtual Desktop deployment and upload the image to Azure.
- The Azure Virtual Desktop deployment will provide access to a custom app named App1.
Performance Requirements
Northwind Traders identifies the following performance requirements:
- Each Azure Virtual Desktop session host must support 15 user sessions.
- Each new user session must be assigned to a single session host until the maximum session limit is reached for that host.
Application Requirements
Northwind Traders identifies the following application requirements:
- Microsoft OneDrive must launch when users connect to a RemoteApp session in Azure Virtual Desktop.
- App1 requires a desktop resolution of 1280 x 1024.
- Administrative effort must be minimized.
Disaster Recovery Requirements
Northwind Traders identifies the following disaster recovery requirements for the Azure Virtual Desktop deployment:
- Minimize outages if an Azure region fails.
- Minimize the recovery time objective (RTO).
- Minimize administrative effort in the event of a failover.
Security Requirements
Northwind Traders identifies the following security requirements:
- When users sign in to the Azure Virtual Desktop deployment by using the Azure Virtual Desktop client, they must authenticate by using their Microsoft Entra username and password only.
- When users sign in to the Azure Virtual Desktop deployment by using a web browser, they must authenticate by using the Microsoft Authenticator app.
- All the Azure Virtual Desktop session hosts deployed by using the VM1 source image must be onboarded to Microsoft Defender for Endpoint.
- The client version and operating system used to connect to the session hosts must be logged.
- The solution must follow the principle of least privilege.
Networking Requirements
The Azure Virtual Desktop session hosts must be able to access the resources on the on- premises network.
User Profile Requirements
Northwind Traders identifies the following user profile requirements:
- Users must be able to access share1 by using their Microsoft Entra account.
- Azure Virtual Desktop user profiles must be managed by using FSLogix.
- All user profiles must be stored in share1.
What should you do to meet the user profile requirements?

You have an Azure subscription named Subscription that contains an Azure Virtual Desktop host pool named HostPool1.
HostPool1 is managed by using Microsoft Intune. Subscription1 contains 50 users that connect to HostPool1 by using computers that run Windows 10.
You need to prevent the users from copying files between an Azure Virtual Desktop session and the computers. The solution must minimize administrative effort.
What should you do?

You have an Azure Virtual Desktop deployment that contains a host pool. The host pool contains
10 session hosts. The session hosts are configured by using a custom image and ephemeral disks.
You need to deploy Microsoft OneDrive for Business.
Which two actions should you perform for each session host? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.