Get ready to pass the AZ-140 Exam right now using our Microsoft Certified Exam Package
A fully updated 2025 AZ-140 Exam Dumps exam guide from training expert PassLeaderVCE
NEW QUESTION # 46
You need to evaluate the RDS deployment in the Seattle office. The solution must meet the technical requirements.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Reference:
https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/migrate/azure-best-practices/contoso-migratio
NEW QUESTION # 47
Which users can create Pool4, and which users can join session hosts to the domain? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Topic 2, Litware, Inc
Existing Environment
Identity Environment
The network contains an on-premises Active Directory domain named litware.com that syncs to an Azure Active Directory (Azure AD) tenant named litware.com.
The Azure AD tenant contains the users shown in the following table.
All users are registered for Azure Multi-Factor Authentication (MFA).
Existing Environment. Cloud Services
Litware has a Microsoft 365 E5 subscription associated to the Azure AD tenant. All users are assigned Microsoft 365 Enterprise E5 licenses.
Litware has an Azure subscription associated to the Azure AD tenant. The subscription contains the resources shown in the following table.
Litware uses custom virtual machine images and custom scripts to automatically provision Azure virtual machines and join the virtual machines to the on-premises Active Directory domain.
Network and DNS
The offices connect to each other by using a WAN link. Each office connects directly to the internet.
All DNS queries for internet hosts are resolved by using DNS servers in the Boston office, which point to root servers on the internet. The Chennai office has caching-only DNS servers that forward queries to the DNS servers in the Boston office.
Requirements. Planned Changes
Litware plans to implement the following changes:
Deploy Windows Virtual Desktop environments to the East US Azure region for the users in the Boston office and to the South India Azure region for the users in the Chennai office.
Implement FSLogix profile containers.
Optimize the custom virtual machine images for the Windows Virtual Desktop session hosts.
Use PowerShell to automate the addition of virtual machines to the Windows Virtual Desktop host pools.
Requirements. Performance Requirements
Litware identifies the following performance requirements:
Minimize network latency of the Windows Virtual Desktop connections from the Boston and Chennai offices.
Minimize latency of the Windows Virtual Desktop host authentication in each Azure region.
Minimize how long it takes to sign in to the Windows Virtual Desktop session hosts.
Requirements. Authentication Requirements
Litware identifies the following authentication requirements:
Enforce Azure MFA when accessing Windows Virtual Desktop apps.
Force users to reauthenticate if their Windows Virtual Desktop session lasts more than eight hours.
Requirements. Security Requirements
Litware identifies the following security requirements:
Explicitly allow traffic between the Windows Virtual Desktop session hosts and Microsoft 365.
Explicitly allow traffic between the Windows Virtual Desktop session hosts and the Windows Virtual Desktop infrastructure.
Use built-in groups for delegation.
Delegate the management of app groups to CloudAdmin1, including the ability to publish app groups to users and user groups.
Grant Admin1 permissions to manage workspaces, including listing which apps are assigned to the app groups.
Minimize administrative effort to manage network security.
Use the principle of least privilege.
Requirements. Deployment Requirements
Litware identifies the following deployment requirements:
Use PowerShell to generate the token used to add the virtual machines as session hosts to a Windows Virtual Desktop host pool.
Minimize how long it takes to provision the Windows Virtual Desktop session hosts based on the custom virtual machine images.
Whenever possible, preinstall agents and apps in the custom virtual machine images.
NEW QUESTION # 48
You have a Windows Virtual Desktop deployment.
You publish a RemoteApp named AppVersion1.
You need AppVersion1 to appear in the Remote Desktop client as Sales Contact Application.
Which PowerShell cmdlet should you use?
- A. Update-AzWvdApplication
- B. Update-AzWvdApplicationGroup
- C. Register-AzWvdApplicationGroup
- D. New-AzADApplication
Answer: A
Explanation:
Explanation/Reference:
https://docs.microsoft.com/en-us/azure/virtual-desktop/customize-feed-for-virtual-desktop-users
https://docs.microsoft.com/en-us/powershell/module/az.desktopvirtualization/update-azwvdapplication?
view=azps-5.7.0
NEW QUESTION # 49
You have an Azure subscription that contains an Azure Virtual Desktop deployment. The subscription contains the virtual networks shown in the following table.
have virtual network peering configured as shown in the following table.
The deployment contains the session hosts shown in the following table.
Windows Defender Firewall is configured on each session host to allow all network traffic between the session hosts For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
NEW QUESTION # 50
You have a Windows Virtual Desktop host pool named Pool1 and an Azure Storage account named Storage1.
Storage1 stores FSLogix profile containers in a share folder named share1.
You create a new group named Group1. You provide Group1 with permission to sign in to Pool1.
You need to ensure that the members of Group1 can store the FSLogix profile containers in share1. The solution must use the principle of least privilege.
Which two privileges should you assign to Group1? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. the Storage File Data SMB Share Elevated Contributor role for storage1
- B. the List folder / read data NTFS permissions for share1
- C. the Storage File Data SMB Share Reader role for storage1
- D. the Storage Blob Data Contributor role for storage1
- E. the Storage File Data SMB Share Contributor role for storage1
- F. the Modify NTFS permissions for share1
Answer: E,F
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/virtual-desktop/create-file-share
NEW QUESTION # 51
You network contains an on-premises Active Directory domain that syncs to an Azure Active Directory (Azure AD) tenant. The domain contains the users shown in the following table.
You have a Windows Virtual Desktop deployment that contains the application groups shown in the following table.
You have the workspaces shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/virtual-desktop/environment-setup
NEW QUESTION # 52
You have a Windows Virtual Desktop host pool that has a max session limit of 15. Disconnected sessions are signed out immediately.
The session hosts for the host pool are shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Reference:
https://docs.microsoft.com/en-us/azure/virtual-desktop/set-up-scaling-script
NEW QUESTION # 53
You have an Azure subscription that contains a resource group named RG1. RG1 contains the resources shown in the following table.
Your on-premises network has an IP address range of 192.168.10.0/24. Users on Host1 can successfully connect to the resources on the network.
You add a new on-premises network that has an IP address range of 192.168.11.0/24 and contains a subnet. The subnet contains an application server named App1.
Users report that Host1 cannot connect to App1.
You need to ensure that the users on Host1 can access App1.
What should you modify?
- A. Pooi1 only
- B. Pool1, Pool2, Pool3, and Pool4
- C. Pooi1 and Pool2 only
- D. Pool1 and Pool3 only
- E. Pool1, Pool2, and Pool3 only
Answer: B
NEW QUESTION # 54
-
You have an Azure subscription that contains a user named User1.
The subscription uses the Azure Virtual Desktop host pools shown in the following table.
You need to ensure that User1 can create RemoteApp app groups that will be used to stream a suite of custom apps from the host pools. The solution must meet the following requirements:
* The apps must be available to the users in all the pools.
* The principle of least privilege must be followed.
* Administrative effort must be minimized.
Which role should you assign to User1, and what is the minimum number of app groups that User1 should create? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Desktop Virtualization Group
3
NEW QUESTION # 55
Your company has a single office and has 40 employees.
You ate planning a Azure Virtual Desktop deployment. The estimated user workloads are shown in the following table.
Half the users of each workload type work from home. All the users who work from home do NOT establish a VPN connection to the office. Approximately how much bandwidth is needed between the office and Azure lo support the planned workloads?
- A. 110 Mbps
- B. 220 Mbps
- C. 9.5 Mbps
- D. 55 Mbps
Answer: D
NEW QUESTION # 56
You have an Azure Virtual Desktop deployment.
You are configuring the outbound firewall settings for the host pool.
Which outbound URL and outbound port should you configure to ensure that the host machines maintain Windows activation? To answer, select the appropriate options In the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Reference:
https://docs.microsoft.com/en-us/azure/virtual-desktop/safe-url-list
NEW QUESTION # 57
You have a Microsoft Entra tenant named contoso.com that contains cloud-only user accounts.
You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains session hosts that are joined to contoso.com.
You plan to use FSLogix profile containers to manage user profiles.
You need to configure storage for the FSLogix solution.
Which type of storage should you use for the profile containers, and which FSLogix registry key should you configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 58
Your network contains an on-premises Active Directory domain that syncs to an Azure Active Directory (Azure AD) tenant. The domain contains the domain controllers shown in the following table.
The DNS servers are configured to forward requests to an external DNS service.
You create a new virtual network named VNET2 that is peered to VNET1 and has gateway transit enabled.
You plan to implement an Azure Virtual Desktop host pool in VNET2. The session hosts will be joined to the Active Directory domain.
You need to configure DNS to meet the following requirements:
Ensure that Azure Virtual Desktop users can resolve on-premises servers and Azure resources.
Ensure that azure Virtual Desktop remains operational if a DNS server fails.
Minimize administrative effort.
What should you configure?
- A. the DNS settings of VNET2 to use Server2 and Served
- B. the DNS settings of the virtual machines to use the Azure DNS service
- C. the DNS settings of VNET2 to use the Azure DNS service
- D. the DNS settings of the virtual machines to use Server2 and Server1
Answer: D
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-name-resolution-for-vms-and-role-instances#name-resolution-that-uses-your-own-dns-server
NEW QUESTION # 59
Which two actions should you perform to meet the security requirements for Defender for Endpoint? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
- A. Add a Defender for Endpoint onboarding script to VM1 and run the script at first startup.
- B. Use a Group Policy Object (GPO) to run an onboarding script from a shared location.
- C. Create an app attach image for the Azure Virtual Desktop deployment.
- D. Run a Defender for Endpoint onboarding script on VM1 before generalizing the VM1 source image.
Answer: B,D
NEW QUESTION # 60
You have the Azure Virtual Desktop deployment shown in the following table.
You plan to deploy a new host pool as shown in the following table.
You need to ensure that you can deploy the host pool.
What should you do?
- A. Change the proposed virtual machine size for the session hosts to D4s_v3.
- B. Submit a support request for service and subscription limits.
- C. Add a lock to the existing host pool.
- D. Stop and deallocate one of the currently deployed virtual machines.
Answer: B
NEW QUESTION # 61
You have an Azure subscription that contains the virtual machines shown in the following table.
You create an Azure Compute Gallery as shown in the Azure compute gallery exhibit. (Click the Azure compute gallery tab.)
You create a virtual machine image definition as shown in the VM image definition exhibit. (Click the VM image definition tab.)
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Answer:
Explanation:
NEW QUESTION # 62
You have a Azure Virtual Desktop deployment.
You need to monitor the deployment of using the Azure Virtual Desktop Insights solution in Azure Monitor.
What should you use as the Diagnostic settings destination for the host pool?
- A. Storage account
- B. Event hub
- C. Log Analytics workspace
Answer: A
NEW QUESTION # 63
You plan to deploy Azure Virtual Desktop.
You are deploying Storage Spaces Direct to a cluster that will store FSLogix profile containers. The cluster will NOT use Cloud witness.
What is the minimum number of virtual machines required for the cluster?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
Explanation:
Explanation
https://learn.microsoft.com/en-us/azure/virtual-desktop/store-fslogix-profile
NEW QUESTION # 64
You network contains an on-premises Active Directory domain that syncs to an Azure Active Directory (Azure AD) tenant. The domain contains the users shown in the following table.
You have a Windows Virtual Desktop deployment that contains the application groups shown in the following table.
You have the workspaces shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Reference:
https://docs.microsoft.com/en-us/azure/virtual-desktop/environment-setup
NEW QUESTION # 65
You are automating the deployment of an Azure Virtual Desktop host pool.
You deploy the Azure Resource Manager (ARM) template shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the Dockerfile.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Graphical user interface, text, application Description automatically generated
Reference:
https://docs.microsoft.com/en-us/azure/virtual-desktop/virtual-desktop-fall-2019/configure-host-pool-personal-de
NEW QUESTION # 66
You have a Windows Virtual Desktop deployment.
You publish a RemoteApp named AppVersion1.
You need AppVersion1 to appear in the Remote Desktop client as Sales Contact Application.
Which PowerShell cmdlet should you use?
- A. New-AzADApplication
- B. Update-AzWvdApplicationGroup
- C. Register-AzWvdApplicationGroup
- D. Update-AzWvdApplication
Answer: A
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/virtual-desktop/customize-feed-for-virtual-desktop-users
https://docs.microsoft.com/en-us/powershell/module/az.desktopvirtualization/update-azwvdapplication?view=azps-5.7.0
NEW QUESTION # 67
DRAG DROP
-
Your on-premises network contains an Active Directory domain that syncs with an Azure AD tenant.
You have an Azure Virtual Desktop host pool that contains Windows 11 session hosts joined to the domain.
You need to configure Azure NetApp Files to store user profile containers.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select.
Answer:
Explanation:
NEW QUESTION # 68
You deploy multiple Azure Virtual Desktop session hosts that have only private IP addresses.
You need to ensure that administrators can initiate an RDP session to the session hosts by using the Azure portal.
What should you implement?
- A. Azure Bastion
- B. Remote Desktop Connection Broker (RD Connection Broker)
- C. Remote Desktop Session Host (RD Session Host)
- D. Azure Application Gateway
Answer: A
Explanation:
Azure Bastion is a new fully platform-managed PaaS service you provision inside your virtual network. It provides secure and seamless RDP/SSH connectivity to your VMs directly in the Azure portal over SSL. When you connect via Azure Bastion, your virtual machines do not need a public IP address.
https://azure.microsoft.com/en-us/services/azure-bastion/#get-started
NEW QUESTION # 69
You have a Windows Virtual Desktop host pool that runs Windows 10 Enterprise multi-session.
You need to configure automatic scaling of the host pool to meet the following requirements:
Distribute new user sessions across all running session hosts.
Automatically start a new session host when concurrent user sessions exceed 30 users per host.
What should you include in the solution?
- A. an Azure Automation account and the breadth-first load balancing algorithm
- B. an Azure load balancer and the depth-first load balancing algorithm
- C. an Azure Automation account and the depth-first load balancing algorithm
- D. an Azure load balancer and the breadth-first load balancing algorithm
Answer: C
NEW QUESTION # 70
You have an Azure Virtual Desktop deployment that contains a host pool named Pooh.
Pool1 contains session hosts that run Windows 11 Enterprise and have Microsoft Teams installed.
Users connect to the session hosts by using client devices that run Windows 10 Enterprise.
You need to configure the session hosts and the client devices to meet the following requirements:
* Teams audio and video must be processed on the client devices.
* Hardware encoding must be enabled.
What should you do? To answer, drag the appropriate actions to the correct devices. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 71
......
To prepare for the AZ-140 certification exam, candidates are recommended to have hands-on experience in managing and configuring virtual desktops on Microsoft Azure. They should also have knowledge of Azure infrastructure, network, and security concepts. Microsoft offers various training resources, including instructor-led courses, online learning, and practice exams, to help candidates prepare for the exam. Passing the AZ-140 exam leads to the Microsoft Certified: Azure Virtual Desktop Specialty certification, which demonstrates the candidate's expertise in Azure Virtual Desktop implementation and management.
Master 2025 Latest The Questions Microsoft Certified and Pass AZ-140 Real Exam!: https://pass4itsure.passleadervce.com/Microsoft-Certified/reliable-AZ-140-exam-learning-guide.html