Azure AZ-140 flashcards
Azure AZ-140 · Build recall with a focused review session.
32 cards. Read the term and the definition here. The deck at the top of this page is optional.
- Breadth-first load balancing
- Pooled host pool algorithm that spreads new sessions evenly across available session hosts by selecting the host with the lowest session count, maximizing resilience for many users.
- Depth-first load balancing
- Pooled algorithm that keeps placing sessions on one host until it hits its max session limit, then moves to the next, allowing unused hosts to stay shut down for cost savings.
- Personal host pool assignment
- In a personal host pool each user gets a dedicated session host; automatic assignment gives the host to the first user who connects, while direct assignment lets an administrator name the user up front.
- Session host registration key
- Host-pool-specific secret entered during AVD agent installation that registers a virtual machine as a session host; regenerating it invalidates the old key for new registrations only.
- Reverse connect transport
- Session hosts open outbound TCP 443 connections to the Azure Virtual Desktop service and receive user connections over that channel, so no inbound ports or public IPs are required.
- RDP Shortpath public networks
- Uses a TURN relay over UDP port 3478 to establish a direct UDP transport to the session host, and requires that the host has a public IP address or outbound NAT.
- Validation host pool
- A host pool flagged as a validation environment receives Azure Virtual Desktop service and agent updates before production host pools, letting administrators test compatibility first.
- Autoscale scaling plan phases
- A scaling plan defines ramp-up, peak, ramp-down, and off-peak phases, each with a capacity threshold and a minimum percentage of session hosts that stay running.
- Microsoft Entra ID join for AVD
- Lets session hosts join Microsoft Entra ID instead of an Active Directory domain, enabling Entra ID sign-in and single sign-on; it is supported for pooled host pools.
- AVD single sign-on
- Feature that uses Microsoft Entra ID authentication to pass a primary refresh token to the session host, removing the second credential prompt inside the Remote Desktop client.
- Conditional Access for AVD
- Policies target the Azure Virtual Desktop cloud application and can require multifactor authentication, compliant devices, or block legacy sign-ins; enforcement needs Entra ID authentication.
- Desktop Virtualization User role
- RBAC role assigned on an application group or workspace that lets a user launch published desktops and RemoteApps, granting no administrative rights on the session hosts.
- MFA enforcement in AVD
- Multifactor authentication is enforced through Conditional Access policies or AD FS claims rather than host pool settings, and applies to the Azure Virtual Desktop cloud application.
- Screen capture protection
- Host pool RDP property that blocks screen capture tools so protected content stays out of screenshots on supported clients; a companion watermark option adds a QR code overlay.
- Entra ID Kerberos for Azure Files
- Authentication method letting Microsoft Entra ID joined session hosts access Azure Files SMB shares for FSLogix profiles without domain controllers, using a Kerberos server identity object.
- Encryption at host
- Azure VM option that encrypts temporary disks, data disk caches, and data flows on the physical host; it must be enabled when the session host is created.
- FSLogix profile container
- Stores the complete user profile in a per-user VHDX hosted on an SMB share and attaches it at sign-in, so every session host presents the same desktop experience.
- FSLogix ODFC container
- Separate container that redirects only Office data such as Outlook OST files, OneDrive, Teams, and SharePoint caches, usable with or without a full profile container.
- Shared Computer Activation
- Microsoft 365 Apps licensing mode required on multi-session and shared session hosts, enabled with SharedComputerLicensing=1, so users activate Office without consuming device licenses.
- Teams media optimization
- Offloads audio and video processing from the session host to the local client through the Teams WebRTC Redirector service, reducing latency and session host CPU load.
- MSIX App Attach lifecycle
- Apps packaged as MSIX are staged from a mounted image, registered for a user session, unregistered at sign-out, then destaged; images can live on an SMB share.
- Desktop application group limit
- A user can be assigned to only one desktop application group per host pool, although the same user may be assigned to several RemoteApp application groups in that pool.
- RDP redirection properties
- Host pool settings such as drivestoredirect, redirectclipboard, redirectprinters, audiocapturemode, and usbdevicestoredirect that control which local resources appear inside the session.
- Universal Print in AVD
- Cloud print service letting multi-session users print to shared printers without a print server or printer drivers on session hosts; printers are assigned per user or group.
- WVDAgentHealthStatus table
- Log Analytics table recording each session host's agent version, last heartbeat time, and health status, used to find hosts that stopped reporting or run outdated agents.
- Azure Virtual Desktop Insights
- Azure Monitor workbook reporting connection performance, host utilization, and errors; it relies on diagnostic settings sending WVD tables plus performance counters through data collection rules.
- Drain mode
- Session host setting that stops new sessions from being placed on the host while existing sessions continue, used before patching, reimaging, or decommissioning that host.
- Start VM on Connect role
- Feature letting end users power on deallocated session hosts; it requires the Desktop Virtualization Power On Contributor role granted to the Azure Virtual Desktop service principal.
- AVD diagnostic settings
- Configuration on host pools, workspaces, and application groups that streams logs and metrics to Log Analytics, storage accounts, or Event Hubs for monitoring and retention.
- Session host re-registration
- Fixing a host stuck in the Unavailable state by reinstalling the AVD agent with a newly generated registration key, or uninstalling the agent and rerunning the installer.
- Azure Update Manager
- Azure service used to assess and schedule operating system updates on session hosts; image-level changes are applied by patching the gallery image and redeploying hosts.
- WVDConnections table
- Log Analytics table storing per-connection records including user, session host, connection state, and start time, which AVD Insights uses for usage and latency reporting.