AZ-140 Practice Questions & Answers

Loading your practice set…

In a scenario where you need to plan an Azure Virtual Desktop host pool for a company with 500 users, each user requires a personalized desktop experience and the company has limited resources, which type of load balancing should you choose and why?

Pooled desktop with breadth-first load balancing
Personal desktop with depth-first load balancing (Correct)
Pooled desktop with depth-first load balancing
Personal desktop with breadth-first load balancing

Explanation: For personalized desktop experiences, a personal desktop should be chosen over a pooled desktop because each user gets their own virtual machine with their own settings and applications. The depth-first load balancing should be used as it ensures that each user is assigned to the same virtual machine, maintaining their personalized environment across sessions.

A company wants to deploy Azure Virtual Desktop for its sales team of 300 users, prioritizing cost efficiency while ensuring a good user experience. Which type of desktop and load balancing strategy would you recommend and why?

Personal desktop with breadth-first load balancing
Pooled desktop with depth-first load balancing
Pooled desktop with breadth-first load balancing (Correct)
Personal desktop with depth-first load balancing

Explanation: Given the requirement for cost efficiency and a good user experience, a pooled desktop with breadth-first load balancing would be recommended. Pooled desktops are more cost-effective as they share resources among multiple users, and breadth-first load balancing ensures that users are distributed across available virtual machines, optimizing resource usage and providing a consistent user experience.

In your Azure Virtual Desktop deployment, you need to register new session hosts with a specific host pool. Which of the following actions should you perform to ensure that the session hosts are correctly registered and can scale according to the defined scaling plan?

Create a new custom image from an existing session host.
Register the session hosts with the existing host pool using the correct scaling plan. (Correct)
Create a new host pool with a different scaling plan.
Delete the current host pool and create a new one with the desired scaling plan.

Explanation: The correct answer is B. You should use the Azure portal or PowerShell to register the session hosts with the appropriate host pool and ensure they are configured with the correct scaling plan. Option A is incorrect because custom images need to be generalized before being used as templates. Option C is incorrect because it refers to creating a custom image, which is not related to registering session hosts. Option D is incorrect because it involves creating a new host pool, which is not necessary if the host pool already exists.

You are managing an Azure Virtual Desktop environment and want to ensure that all session hosts in a particular host pool are updated to the latest version of the operating system. What is the best approach to achieve this without manually updating each session host individually?

Manually update each session host to the latest version.
Generalize a custom image from a session host and use it to create new session hosts. (Correct)
Create a new host pool with the latest version of the operating system.
Change the scaling plan to include the latest version of the operating system.

Explanation: The correct answer is B. Generalizing a custom image ensures that all session hosts created from this image will have the latest updates applied. Option A is incorrect because it does not address the need for updating the session hosts. Option C is incorrect because it suggests creating a new host pool, which is unnecessary for updating existing session hosts. Option D is incorrect because it implies using a different scaling plan, which is unrelated to updating the operating system.

In an Azure Virtual Desktop (AVD) environment, you need to assign a user named 'John Doe' the ability to manage session hosts but not the ability to manage host pools. Which role assignment should you create in Azure Active Directory (AAD)? Note: You can only choose one role assignment.

Virtual Machine Contributor
Virtual Machine Operator (Correct)
Virtual Machine User
Host Pool Administrator

Explanation: The correct answer is B because the 'Virtual Machine Operator' role allows users to manage session hosts but does not provide access to manage host pools. The 'Virtual Machine Contributor' role would allow management of both session hosts and host pools, which is not required in this scenario. The 'Virtual Machine User' role only allows users to connect to session hosts, which is insufficient for John Doe's needs.

You have configured Conditional Access policies for your Azure Virtual Desktop (AVD) environment to require Multi-Factor Authentication (MFA) for all clients connecting from outside the corporate network. However, you want to ensure that users who connect from specific trusted IP ranges do not have to use MFA. How should you configure the Conditional Access policy? Note: You can only choose one option.

Create a new Conditional Access policy and set the MFA requirement to 'Never'
Create a new Conditional Access policy and add an exception for the trusted IP ranges (Correct)
Modify the existing Conditional Access policy to include an exception for the trusted IP ranges
Use Azure Firewall to block MFA for connections from trusted IP ranges

Explanation: The correct answer is B because you can define exceptions within the Conditional Access policy to exclude certain IP ranges from requiring MFA. Option A is incorrect because it does not provide a way to exclude specific IP ranges. Option C is incorrect because it does not address the requirement to exclude specific IP ranges. Option D is incorrect because it does not provide a way to define exceptions within the policy.

In a scenario where you need to configure Azure Files for FSLogix profile containers, which of the following steps is necessary to ensure proper SMB permissions and Kerberos authentication for the storage account? Assume that the storage account is already created and accessible.

Create a local storage container on the FSLogix agent.
Set up Azure AD application proxy for the storage account. (Correct)
Enable Azure Files caching on the FSLogix agent.
Configure the storage account to use managed identities.

Explanation: The correct answer is B because setting up Azure AD application proxy ensures that the storage account can authenticate users using Kerberos. Option A is incorrect as it pertains to configuring local storage, not Azure Files. Option C is incorrect as it refers to a feature unrelated to Azure Files. Option D is incorrect as it involves a step that is not required for Azure Files setup.

When configuring FSLogix profile containers with Azure Files, what is the recommended method for managing the cloud cache to ensure optimal performance and security?

Use local storage for the cloud cache to reduce network latency.
Configure the cloud cache to use Azure Files for storage. (Correct)
Disable the cloud cache to improve performance.
Set up a separate storage account for each user's cache.

Explanation: The correct answer is B because configuring the cloud cache to use Azure Files provides a secure and efficient way to manage cached data. Option A is incorrect as it suggests using local storage, which is not recommended for FSLogix. Option C is incorrect as it refers to a feature not related to cloud cache management. Option D is incorrect as it involves a step that is not directly related to the cloud cache configuration.