I85PREP
⌘ K
Azure AZ-140 study materials
Azure AZ-140 study resources

Azure AZ-140 practice questions

One question at a time. Build your Azure AZ-140 understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Plan and implement an Azure Virtual Desktop infrastructure

A company needs each user to always return to the same session host so that locally installed applications and local profile changes persist between sessions. Which host pool type should be created?

  1. Personal Correct answer.
  2. Pooled with persistent load balancing
  3. Pooled with depth-first load balancing
  4. Pooled with breadth-first load balancing

Explanation

A personal host pool assigns each user a dedicated session host, so any local changes made by that user survive across sessions. Pooled host pools, regardless of load-balancing algorithm, hand out whichever host is available at sign-in time.

Question 2Plan and implement an Azure Virtual Desktop infrastructure

In a pooled host pool, which load-balancing algorithm directs a new user session to the session host with the fewest active sessions?

  1. Priority-based
  2. Depth-first
  3. Round-robin
  4. Breadth-first Correct answer.

Explanation

Breadth-first spreads sessions evenly by selecting the session host that currently has the lowest session count. Depth-first instead saturates one host up to its maximum session limit before using the next host.

Question 3Plan and implement an Azure Virtual Desktop infrastructure

A pooled host pool uses depth-first load balancing with a maximum session limit of 10 and contains two session hosts. How are the first 12 user sessions distributed?

  1. 10 sessions on the first host and 2 on the second Correct answer.
  2. 12 sessions on the first host
  3. 2 sessions on the first host and 10 on the second
  4. 6 sessions on each host

Explanation

Depth-first load balancing fills a session host until it reaches the host pool's maximum session limit before placing new sessions on the next available host, so the first host takes 10 and the overflow goes to the second.

Question 4Plan and implement an Azure Virtual Desktop infrastructure

What is the purpose of the registration key that is generated for a host pool?

  1. It authenticates users to the Azure Virtual Desktop gateway.
  2. It registers a session host with the host pool. Correct answer.
  3. It decrypts the FSLogix profile container.
  4. It licenses the session hosts for multi-session Windows.

Explanation

The registration key is supplied to the Azure Virtual Desktop agent installer so the virtual machine joins the correct host pool. Keys can be configured to expire, after which a new key must be generated for further registrations.

Question 5Plan and implement an Azure Virtual Desktop infrastructure

How do client connections reach a session host in Azure Virtual Desktop without exposing inbound ports?

  1. Session hosts make outbound TCP 443 connections to the AVD service. Correct answer.
  2. Inbound TCP 3389 must be opened from the internet to each session host.
  3. Clients connect directly to each session host's public IP address.
  4. An inbound site-to-site VPN gateway is required in the virtual network.

Explanation

Session hosts use the reverse-connect transport: they establish outbound HTTPS connections to the Azure Virtual Desktop service, and RDP traffic flows back over that already-established channel. No inbound ports or public IP addresses are required on the session hosts.

Question 6Plan and implement an Azure Virtual Desktop infrastructure

Users must receive only two published programs from a pooled host pool, with no full desktop session. What should you create?

  1. A desktop application group
  2. A personal host pool
  3. A RemoteApp application group Correct answer.
  4. A workspace with a desktop application group

Explanation

RemoteApp application groups publish individual programs from the session hosts, and the programs are added to the application group and then associated with a workspace. Desktop application groups publish a full desktop session instead.

Question 7Plan and implement an Azure Virtual Desktop infrastructure

What is the role of a workspace in Azure Virtual Desktop?

  1. It defines the load-balancing algorithm for the host pool.
  2. It hosts the session host virtual machines.
  3. It stores the FSLogix profile disks.
  4. It groups application groups into a user-visible feed. Correct answer.

Explanation

A workspace is a logical container that groups one or more application groups so the published resources appear together in the Azure Virtual Desktop client feed. Access to those resources is still governed by role assignments on the application groups.

Question 8Plan and implement an Azure Virtual Desktop infrastructure

You must store FSLogix profile containers for several hundred multi-session users who generate heavy profile I/O. Which storage choice meets the latency requirement?

  1. Azure Files premium file share or Azure NetApp Files Correct answer.
  2. Azure Blob Storage with a standard general-purpose v2 account
  3. Azure Files standard file share
  4. Azure managed disk attached to each session host

Explanation

FSLogix requires an SMB-accessible location, and premium Azure Files or Azure NetApp Files provides the IOPS and latency needed for large multi-session profile workloads. Standard tiers are typically undersized for this level of concurrent profile I/O.

Question 9Plan and implement an Azure Virtual Desktop infrastructure

You want session hosts to power off after business hours and come back online before the workday starts, based on schedules and active session counts. What should you configure?

  1. A scaling plan assigned to the host pool Correct answer.
  2. A validation environment on the host pool
  3. A host pool maximum session limit of zero
  4. An availability set for the session hosts

Explanation

Scaling plans automate ramp-up, peak, ramp-down and off-peak behaviour using schedules and session thresholds, starting and deallocating session hosts for you. They are assigned to host pools and can be scoped to tags or host pool capacity.

Question 10Plan and implement an Azure Virtual Desktop infrastructure

Which statement about Microsoft Entra ID-joined session hosts is correct?

  1. Users sign in with Microsoft Entra ID credentials. Correct answer.
  2. They can only host RemoteApp application groups.
  3. They cannot be used with FSLogix profile containers.
  4. They require a domain controller in the same virtual network.

Explanation

Microsoft Entra ID join removes the dependency on Active Directory domain controllers, and users authenticate to session hosts with their Entra ID identities. Additional configuration is needed only for resources that still require Kerberos, such as Azure Files.

Question 11Plan and implement an Azure Virtual Desktop infrastructure

You need a single golden image that is versioned and can be deployed to session hosts in several Azure regions. What should you use?

  1. An ARM template with a custom script extension
  2. A VHD stored in a general-purpose blob container
  3. An Azure Compute Gallery with image versioning Correct answer.
  4. A managed disk snapshot copied manually to each region

Explanation

Azure Compute Gallery stores image definitions, tracks versions, and replicates each version to the regions you select, so host pool deployments stay consistent and reproducible. It also supports specialized and generalized images plus shared access across subscriptions.

Question 12Plan and implement an Azure Virtual Desktop infrastructure

Users connecting over the internet report high latency and packet loss with the default transport. Which feature establishes a UDP connection directly to the session host?

  1. RDP bandwidth throttling
  2. RDP Shortpath for managed networks
  3. RDP Shortpath for public networks Correct answer.
  4. Azure Front Door acceleration

Explanation

RDP Shortpath for public networks establishes a UDP-based connection directly to the session host over the internet, improving latency and throughput compared with the TCP reverse-connect tunnel. The managed-networks variant instead relies on private connectivity such as VPN, ExpressRoute, or peering.

Question 13Plan and implement an Azure Virtual Desktop infrastructure

Which requirement must be met before an application can be delivered with MSIX app attach?

  1. The package must be signed with a publicly trusted certificate.
  2. The application must be preinstalled on the golden image.
  3. The package must be expanded into an image on a reachable share. Correct answer.
  4. The session hosts must belong to a personal host pool.

Explanation

MSIX app attach works by expanding the package into an application image stored on a share the session hosts can read, then mounting it into the user session at sign-in. Because of this, the application is not installed in the base image at all.

Question 14Plan and implement an Azure Virtual Desktop infrastructure

You store FSLogix profiles on Azure Files and need NTFS permissions that map to on-premises Active Directory user accounts. Which configuration should you use?

  1. Azure Files with shared key authentication and share-level ACLs
  2. Azure Blob Storage with SAS tokens
  3. Azure Files with anonymous access enabled
  4. Azure Files with on-premises AD DS authentication Correct answer.

Explanation

To apply NTFS ACLs that correspond to Active Directory user identities on Azure Files, the storage account must be joined to AD DS and users must authenticate with their domain credentials. Shared key access cannot be scoped per user.

Question 15Plan and implement an Azure Virtual Desktop infrastructure

A pilot group must receive Azure Virtual Desktop service updates before the rest of the organization. What should you configure?

  1. Deploy the pilot hosts in a different Azure region.
  2. Create a separate application group in the production host pool.
  3. Add the pilot hosts to the production host pool and set the max session limit to 1.
  4. Set the host pool's validation environment property to Yes. Correct answer.

Explanation

Marking a host pool as a validation environment means it receives service updates before host pools that are not marked, so the pilot group can test new builds first. After validation, the same update is applied to the remaining production host pools.

Question 16Plan and implement an Azure Virtual Desktop infrastructure

Which built-in role must be assigned to a user so they can connect to published desktops and apps?

  1. Desktop Virtualization Contributor
  2. Virtual Machine Contributor
  3. Desktop Virtualization User Correct answer.
  4. Desktop Virtualization Host Pool Contributor

Explanation

Desktop Virtualization User is assigned on the application group and grants end users access to the published resources. The contributor roles allow an administrator to manage configuration but do not grant sign-in rights.

Question 17Plan and implement an Azure Virtual Desktop infrastructure

Which entitlement allows a user to access Azure Virtual Desktop session hosts?

  1. Microsoft 365 or Windows E3/E5 per user Correct answer.
  2. An Azure pay-as-you-go subscription
  3. A Visual Studio Professional subscription
  4. A Microsoft 365 Business Basic plan

Explanation

Azure Virtual Desktop requires an eligible per-user license, such as Microsoft 365 E3/E5, Windows E3/E5, Windows VDA, or an Azure Virtual Desktop per-user license. The license must be assigned to every user who connects to a session host.

Question 18Plan and implement an Azure Virtual Desktop infrastructure

You are deploying session hosts for a pooled host pool and must keep capacity available if a single datacenter fails. What should you do?

  1. Create two host pools in the same availability zone
  2. Deploy session hosts in different Azure subscriptions
  3. Deploy all session hosts in a single availability set
  4. Deploy session hosts across availability zones Correct answer.

Explanation

Availability zones are physically separate datacenters within a region, so spreading session hosts across zones keeps the host pool usable when one zone is lost. A single host pool can contain session hosts that sit in different zones.

Question 19Plan and implement an Azure Virtual Desktop infrastructure

You need profile resiliency so that an outage of a single file share does not block user sign-in, and profile data should be cached per session host. Which FSLogix feature should you enable?

  1. Office container only
  2. Cloud Cache with multiple profile locations Correct answer.
  3. Roaming user profiles delivered by GPO
  4. Profile container with a single Azure Files share

Explanation

Cloud Cache writes profile data to multiple locations, such as a local disk plus one or more shares, so a session can continue when one location becomes unavailable. It also reduces sign-in time because part of the profile is read locally.

Question 20Plan and implement an Azure Virtual Desktop infrastructure

Which outbound rule must a firewall allow so that a session host can maintain the Azure Virtual Desktop reverse-connect channel?

  1. TCP 3389 inbound from the AVD service
  2. TCP 443 outbound to AVD endpoints Correct answer.
  3. UDP 3478 inbound from the internet
  4. TCP 445 outbound to the internet

Explanation

Session hosts keep the reverse-connect channel open by making outbound TCP 443 connections to the Azure Virtual Desktop service and its required FQDNs. Any firewall or proxy on the host network must permit that traffic.

Question 21Plan and implement an Azure Virtual Desktop infrastructure

Which service should you use to collect Azure Virtual Desktop diagnostics and query historical session connection data?

  1. Network Watcher connection monitor
  2. A Log Analytics workspace Correct answer.
  3. Azure Service Health
  4. Azure Advisor

Explanation

Diagnostic settings on host pools and workspaces send connection, error, and host registration events to a Log Analytics workspace, where they can be queried with KQL and used in alerts and workbooks.

Question 22Plan and implement an Azure Virtual Desktop infrastructure

A personal host pool is configured for automatic assignment. What happens when a user without an assigned session host starts a session?

  1. The service assigns an available unassigned host. Correct answer.
  2. The connection fails until an administrator assigns a host.
  3. The user is redirected to a pooled host pool.
  4. A new session host is provisioned automatically.

Explanation

With automatic assignment the service selects an unassigned session host at the user's first connection and pins that user to it for future sessions. Manual assignment, by contrast, requires an administrator to map users to hosts.

Question 23Plan and implement an Azure Virtual Desktop infrastructure

Which feature lets a user start a deallocated session host directly from the Azure Virtual Desktop client?

  1. RDP Shortpath
  2. Start VM on Connect Correct answer.
  3. A scaling plan ramp-down schedule
  4. Drain mode

Explanation

Start VM on Connect powers on a deallocated session host when a user attempts to connect, and it requires the Desktop Virtualization Power On Contributor role to be granted to the Azure Virtual Desktop service principal. This supports cost savings without leaving hosts running constantly.

Question 24Plan and implement an Azure Virtual Desktop infrastructure

Users can see a workspace in the client but no desktops appear. The desktop application group exists and is associated with the workspace. What is the most likely cause?

  1. The workspace is deployed in a different Azure region.
  2. The host pool is configured to use breadth-first load balancing.
  3. The session hosts are currently in drain mode.
  4. Users are not assigned the Desktop Virtualization User role. Correct answer.

Explanation

A workspace only organizes application groups; a user sees resources only when they hold an RBAC role such as Desktop Virtualization User on the application group itself. Without that assignment the feed is empty even though everything else is configured correctly.

Question 25Plan and implement an Azure Virtual Desktop infrastructure

Several users of a pooled host pool intermittently receive temporary profiles. FSLogix logs show the profile VHDX is already attached when the second sign-in occurs. What is the most likely cause?

  1. The Azure Files share is being throttled.
  2. The FSLogix agent is not installed on the session hosts.
  3. The session hosts are all in drain mode.
  4. The user has active sessions on two session hosts. Correct answer.

Explanation

A profile container VHDX can be mounted by only one session at a time, so a user with simultaneous sessions on two different hosts causes the second sign-in to fall back to a temporary profile. The fix is to prevent concurrent sessions, for example with a single-session limit per user.

Question 26Plan and implement an Azure Virtual Desktop infrastructure

Which host pool load balancing method distributes each new session to the session host that currently has the fewest sessions?

  1. Breadth-first Correct answer.
  2. Round-robin distribution
  3. Persistent host affinity
  4. Depth-first

Explanation

Breadth-first is the default algorithm for pooled host pools and directs each new session to the host with the lowest session count, which spreads users evenly. Depth-first instead fills the first available host to its session limit before moving on. Azure Virtual Desktop exposes only breadth-first and depth-first, so any other scheduling name is not a valid choice.

Question 27Plan and implement an Azure Virtual Desktop infrastructure

A pooled host pool must never place more than 20 concurrent sessions on a single session host. Which host pool setting should you configure?

  1. The preferred app group type
  2. The load balancing algorithm
  3. Max session limit Correct answer.
  4. The registration key expiration

Explanation

Max session limit caps the number of concurrent sessions that the broker will place on any one session host in the pool. Once a host reaches that number it stops receiving new sessions and the broker selects another host. Load balancing and app group settings do not control the per-host session count.

Question 28Plan and implement an Azure Virtual Desktop infrastructure

You prepare a generalized Windows 11 Enterprise multi-session virtual machine to act as a session host. Which components must be installed on it before it can register with a host pool?

  1. The Azure Virtual Desktop agent and the agent boot loader Correct answer.
  2. The FSLogix agent and the Remote Desktop Session Host role
  3. The Azure Monitor agent and the Dependency agent
  4. The Remote Desktop client and the web client

Explanation

The Azure Virtual Desktop agent handles session brokering and health reporting, and the agent boot loader keeps the agent current and starts it. Together with a valid registration key they allow the VM to register with the host pool. The FSLogix and monitoring agents support profiles and telemetry but play no part in registration.

Question 29Plan and implement an Azure Virtual Desktop infrastructure

You need to group session hosts that serve the same users and share the same load-balancing configuration. Which Azure Virtual Desktop object provides this grouping?

  1. Workspace
  2. Host pool Correct answer.
  3. Scaling plan
  4. Application group

Explanation

A host pool is the collection of session hosts that share load-balancing settings, a maximum session limit and the same set of published resources. Application groups draw their hosts from a single host pool, and workspaces only group application groups for user access.

Question 30Plan and implement an Azure Virtual Desktop infrastructure

Which operating system can run a multi-session Azure Virtual Desktop session host that several users share at the same time?

  1. Windows 11 Enterprise multi-session Correct answer.
  2. Windows Server 2022 with the Remote Desktop Session Host role installed
  3. Windows 11 Pro
  4. Windows 10 Home

Explanation

Only the Windows 10 or Windows 11 Enterprise multi-session images provide the multi-session capability that lets multiple users share one session host. Windows Server and the single-session client editions run one user session per host, and Home editions are not supported for Azure Virtual Desktop.

Question 31Plan and implement an Azure Virtual Desktop infrastructure

Users will subscribe to a workspace with the Remote Desktop client for Windows. The deployment uses the Azure Resource Manager model. Which feed URL should users enter?

  1. https://rdweb.wvd.microsoft.com/api/arm/feeddiscovery Correct answer.
  2. https://client.wvd.microsoft.com/api/feeddiscovery
  3. https://rdweb.wvd.microsoft.com/webclient
  4. https://rdweb.wvd.microsoft.com/api/feeddiscovery/webfeeddiscovery.aspx

Explanation

Azure Resource Manager-based workspaces publish their feed at https://rdweb.wvd.microsoft.com/api/arm/feeddiscovery, and that is the URL entered in the client subscription wizard. The /api/feeddiscovery/webfeeddiscovery.aspx path belongs to the retired classic model, and the web client URL is used for browser access rather than client subscription.

Question 32Plan and implement an Azure Virtual Desktop infrastructure

Users of a pooled host pool run computer-aided design software and require GPU acceleration. Which virtual machine series should the session hosts use?

  1. NV-series Correct answer.
  2. D-series general purpose
  3. B-series burstable
  4. L-series storage optimized

Explanation

NV-series (and NVv4) virtual machines include NVIDIA GPUs intended for graphics and visualization workloads, including GPU-accelerated remote sessions. General purpose, burstable and storage optimized series do not provide graphics GPUs.

Question 33Plan and implement an Azure Virtual Desktop infrastructure

Session hosts run in the West Europe Azure region. Where should the FSLogix profile container share be placed to minimize sign-in times?

  1. In the same Azure region as the session hosts Correct answer.
  2. In a storage account in a different region with geo-redundancy
  3. On the session host OS disk
  4. On an on-premises file server reachable over a site-to-site VPN

Explanation

Profile containers are mounted over the network at sign-in, so round-trip latency to the share dominates logon time. Keeping the share in the same Azure region as the session hosts gives the lowest latency and avoids cross-region data charges. Local disks cannot be shared between hosts, and geo-redundant replication does not reduce primary read latency.

Question 34Plan and implement an Azure Virtual Desktop infrastructure

You must delegate the ability to create and manage host pools, application groups and workspaces, without granting subscription ownership. Which built-in role should you assign?

  1. Storage Account Contributor
  2. Desktop Virtualization Contributor Correct answer.
  3. Virtual Machine Contributor
  4. Desktop Virtualization Host Pool Contributor

Explanation

Desktop Virtualization Contributor grants full access to all Azure Virtual Desktop resource types, including host pools, application groups and workspaces. The Host Pool Contributor role is scoped to host pools and their session hosts only, so it cannot manage application groups or workspaces.

Question 35Plan and implement an Azure Virtual Desktop infrastructure

A help desk team must be able to enable drain mode, send messages to users and sign off user sessions. Which built-in role provides these capabilities?

  1. Desktop Virtualization User
  2. Desktop Virtualization Application Group Contributor
  3. Desktop Virtualization Session Host Operator Correct answer.
  4. Desktop Virtualization Workspace Contributor

Explanation

Desktop Virtualization Session Host Operator is scoped to session host and user session actions, which include drain mode, sending messages and logging off sessions. The other AVD roles either grant end-user access or govern application groups and workspaces rather than live sessions.

Question 36Plan and implement an Azure Virtual Desktop infrastructure

You must take a session host out of service for patching tonight while letting current users finish their work. What should you configure?

  1. Set the max session limit of the host pool to one
  2. Assign the session host to a validation host pool
  3. Delete the session host registration
  4. Enable drain mode on the session host Correct answer.

Explanation

Drain mode stops the broker from placing new sessions on a host while leaving existing connections intact. That lets current users finish and lets you patch or rebuild the host afterwards. Changing the maximum session limit affects the whole pool, and removing the registration disconnects users immediately.

Question 37Plan and implement an Azure Virtual Desktop infrastructure

You install applications on a session host VM built from a marketplace image and then plan to capture a custom managed image. What must you run before capturing the image?

  1. The Azure Virtual Desktop agent boot loader installer package
  2. sysprep with the /generalize /oobe /shutdown options Correct answer.
  3. The Remote Desktop Services installation wizard
  4. diskmgmt.msc to generalize the disks

Explanation

A custom image used to create new session hosts must be generalized so that each new VM receives unique machine identity and settings. Running sysprep with /generalize, /oobe and /shutdown prepares the operating system and shuts the VM down before capture. The AVD agent and boot loader are reinstalled or reconfigured after deployment, not before capture.

Question 38Plan and implement an Azure Virtual Desktop infrastructure

Session hosts mount FSLogix profile containers from an Azure Files share. Which outbound network requirement applies to the session hosts?

  1. TCP 3389 to the storage account
  2. UDP 53 to the storage account
  3. TCP 445 to the storage account Correct answer.
  4. TCP 135 to the storage account

Explanation

FSLogix attaches profile VHDX files over SMB, so session hosts must be able to reach the storage account on TCP 445. Many networks block port 445 outbound, which causes profile mount failures at sign-in. Ports 3389, 53 and 135 are unrelated to SMB file access.

Question 39Plan and implement an Azure Virtual Desktop infrastructure

You must enable drive redirection and multi-monitor support for every app group in a host pool with a single configuration. Where should you set these values?

  1. In the host pool RDP properties Correct answer.
  2. On each user's Remote Desktop client
  3. In the workspace properties
  4. In the Azure Virtual Desktop scaling plan

Explanation

Custom RDP properties configured on the host pool are inherited by every application group in that pool, so one change covers all published desktops and apps. Application groups can then override individual properties if needed. Workspaces, scaling plans and client settings do not govern the RDP session parameters sent by the broker.

Question 40Plan and implement an Azure Virtual Desktop infrastructure

Users authenticate to Azure Virtual Desktop with Microsoft Entra ID. You must require multifactor authentication when users connect. What should you configure?

  1. A network security group rule on the host subnet
  2. A Conditional Access policy Correct answer.
  3. A host pool RDP property for multi-monitor
  4. A custom Domain Name System zone

Explanation

Azure Virtual Desktop authentication is performed by Microsoft Entra ID, so sign-in requirements such as multifactor authentication are enforced through Conditional Access policies targeting the Azure Virtual Desktop application. Host pool properties, network rules and DNS settings do not influence how users authenticate.

Question 41Plan and implement an Azure Virtual Desktop infrastructure

You plan to deploy 100 Standard_D4s_v5 session hosts in a subscription that has never hosted virtual machines. Which limit should you verify before deployment?

  1. The number of storage accounts per region
  2. The regional vCPU quota for the Dv5 family Correct answer.
  3. The number of virtual networks per subscription
  4. The number of public IP addresses per region

Explanation

Azure subscriptions have a per-region, per-VM-family vCPU quota, and a new subscription usually has a low default. One hundred D4s_v5 hosts require 400 vCPUs in that family, so the quota must be raised before deployment succeeds. Storage account, virtual network and public IP limits are not the typical blocker for a session host rollout.

Question 42Plan and implement an Azure Virtual Desktop infrastructure

A host pool registration key was generated two weeks ago. New session hosts now fail to register with the host pool. What should you do?

  1. Reinstall the Remote Desktop client on the session hosts
  2. Restart the Azure Virtual Desktop broker service
  3. Generate a new registration key Correct answer.
  4. Reassign the session hosts to a different workspace

Explanation

Registration keys have a limited lifetime that you choose when generating them, so a key created days or weeks earlier may no longer be valid. Generating a fresh key and using it during agent installation registers the new hosts. Broker restarts, workspace membership and client software are unrelated to host registration.

Question 43Plan and implement an Azure Virtual Desktop infrastructure

You create a personal host pool where each user must receive the full desktop of an assigned session host. Which application group type must you create?

  1. Desktop application group Correct answer.
  2. RemoteApp application group
  3. Workspace application group
  4. Hybrid application group

Explanation

Personal host pools publish a complete desktop session, so the application group must be a desktop application group. RemoteApp application groups are used with pooled host pools to publish individual programs. Workspace and hybrid application group types do not exist.

Question 44Plan and implement an Azure Virtual Desktop infrastructure

Each morning a user in a pooled host pool lands on a different session host with different locally installed tools. The user must always return to the same machine. What should you change?

  1. Enable depth-first load balancing on the host pool
  2. Raise the maximum session limit of the host pool
  3. Publish the tools as a RemoteApp application group
  4. Move the user to a personal host pool Correct answer.

Explanation

Pooled host pools assign users to whichever host the load balancer selects, so the machine can change on every connection. Personal host pools give each user a dedicated session host so the desktop and locally installed software stay consistent. Load balancing and session limits only change how pooled sessions are spread.

Question 45Plan and implement an Azure Virtual Desktop infrastructure

You must redirect only the Outlook cached data and OneDrive cache of multi-session users to a container, leaving the rest of the profile in place. Which FSLogix container type should you use?

  1. Profile container
  2. App container
  3. Cloud Cache
  4. Office container Correct answer.

Explanation

The FSLogix Office container redirects only the Office and OneDrive caches, such as the Outlook OST and OneDrive local files, while the rest of the user profile stays where it is. A profile container captures the entire user profile instead. Cloud Cache is a resiliency mechanism that can front either container type.

Question 46Plan and implement an Azure Virtual Desktop infrastructure

Autoscale is enabled on a host pool, but the scaling plan fails to start deallocated session hosts. Which built-in role must be assigned to the Azure Virtual Desktop service principal?

  1. Desktop Virtualization Application Group Contributor
  2. Desktop Virtualization User
  3. Virtual Machine Contributor
  4. Desktop Virtualization Power On Off Contributor Correct answer.

Explanation

A scaling plan acts through the Azure Virtual Desktop service principal, which needs the Desktop Virtualization Power On Off Contributor role on the subscription or resource group containing the session hosts to start and stop them. Roles scoped to application groups or to end users grant no power operations, and Virtual Machine Contributor is not the role the service checks for autoscale.

Question 47Plan and implement an Azure Virtual Desktop infrastructure

You deploy Windows 11 Enterprise multi-session session hosts on Azure. Which virtual machine configuration is required for the guest operating system to boot and run supported?

  1. Generation 1 VM with boot diagnostics enabled on a managed storage account
  2. Generation 1 VM with an unmanaged OS disk
  3. Generation 2 VM with a virtual TPM enabled, such as Trusted launch Correct answer.
  4. Generation 2 VM with accelerated networking disabled

Explanation

Windows 11 requires UEFI firmware, Secure Boot capability and a TPM 2.0 device, which on Azure means a Generation 2 VM with a virtual TPM, typically deployed with Trusted launch. Generation 1 VMs lack these capabilities and are not a supported configuration for Windows 11 session hosts. Accelerated networking is a performance option unrelated to operating system requirements.

Question 48Plan and implement an Azure Virtual Desktop infrastructure

A pooled host pool must support 250 concurrent users. Each session host is configured with a maximum session limit of 20, and breadth-first load balancing is in use. What is the minimum number of session hosts you should deploy?

  1. 10
  2. 20
  3. 12
  4. 13 Correct answer.

Explanation

Each host can take 20 concurrent sessions, so 250 users require 250 / 20 = 12.5 hosts. Because a partial host cannot serve the remaining users, you must round up to 13 hosts to keep total capacity at or above the requirement.

Question 49Plan and implement an Azure Virtual Desktop infrastructure

Session hosts are Microsoft Entra ID joined only and there is no Active Directory domain. FSLogix profile containers will be stored on Azure Files. Which authentication method should you enable so users can mount their profiles?

  1. Microsoft Entra Kerberos Correct answer.
  2. SFTP with a shared access signature
  3. NTLMv2 with a storage account key
  4. Anonymous public access

Explanation

FSLogix needs identity-based SMB access to the profile share, and without Active Directory Domain Services the supported option is Microsoft Entra Kerberos on the storage account. It lets Entra ID identities obtain Kerberos tickets for Azure Files. Storage account keys, SAS tokens and anonymous access do not provide per-user identity for SMB mounts.

Question 50Plan and implement an Azure Virtual Desktop infrastructure

A scaling plan is configured for a pooled host pool. Which setting defines the percentage of the pool's maximum capacity that must be reached before autoscale starts additional session hosts?

  1. Host pool assignment
  2. Minimum percentage of hosts
  3. Capacity threshold Correct answer.
  4. Force logoff

Explanation

Capacity threshold is expressed as a percentage of the maximum session limit, and autoscale starts another host when current usage reaches it. Minimum percentage of hosts instead controls how many hosts stay running during off-peak periods. Host pool assignment and force logoff control scope and user sign-out behaviour.