Free AZ-140 Exam Braindumps
Configuring and Operating Microsoft Azure Virtual Desktop Questions 177–181 (page: 28)

Updated On: 10-Feb-2026

HOTSPOT (Drag and Drop is not supported)

You have an Azure subscription.

You are planning an Azure Virtual Desktop deployment that will use custom Windows 11 images.

You need to configure the custom images to meet the following requirements:

Support FSLogix application masking.

Minimize the components installed in each image.

Which FSLogix components should you install in the administrative workstation image, and which FSLagix components should you install in the session host image? To answer, select the appropriate options in the answer area.

Note: Each correct selection is worth one point.

Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Box 1: FSLogixAppsSetup.exe, FSLogixAppsRuleEditorSetup.exe, and FSLogixAppsJavaRuleRuleEditorSetup Administrative workstation

Note: Install FSLogix Apps Rule Editor and Java Rule Editor The RuleEditor and Java RuleEditor are intended for administrator workstations.

1. Extract the downloaded zip file.
2. Navigate to the directory where the files were extracted.
3. Double-click on Win32 (32-bit) or x64 (64-bit), based on your environment.
4. Double-click on Release.
5. Double-click on FSLogixAppsRuleEditorSetup.exe or FSLogixAppsJavaRuleEditorSetup.exe.
6. Agree to the licensing terms, select Install.

Box 2: FSLogixAppsSetup.exe only
Session host

Note: To set up FSLogix Application Masking on your Windows 11 multi-session session host images, begin by installing the FSLogix Apps software package on each session host. Once installed, create and configure the necessary application masking rules by utilizing FSLogix Rule Editor, a graphical user interface (GUI) tool included in the FSLogix Apps package. With the Rule Editor, you can create rule sets containing assignments and file system or registry rules, defining which users or groups should have access to specific applications.

After configuring your rule sets, save them to a central location accessible by your session hosts (again, Azure Files can help here). Lastly, configure the session hosts to use the rule sets by creating or modifying a local or domain GPO.

Figure: FSLogix application masking rules editor


Reference:

https://learn.microsoft.com/en-us/fslogix/how-to-install-fslogix#install-fslogix-apps-rule-editor-and-java-rule- editor https://www.tekki-gurus.com/optimizing-azure-virtual-desktop-session-host-images/



You have an Azure Virtual Desktop deployment.

You plan to create the host pools shown in the following table.



You plan to provide external users with access to the session hosts.

You need to ensure that connections to Azure Virtual Desktop are licensed by using per-user access pricing.

To which host pools will per-user access pricing apply?

  1. Pool1 only
  2. Pool4 only
  3. Pool1 and Pool2 only
  4. Pool1 and Pool4 only
  5. Pool3 and Pool4 only

Answer(s): C

Explanation:

Pool1 and Pool2:
What is Windows Enterprise multi-session?
Windows 10 Enterprise multi-session and Windows 11 Enterprise multi-session, allows multiple concurrent interactive sessions. Previously, only Windows Server could do this. This capability gives users a familiar Windows experience while IT can benefit from the cost advantages of multi-session and use existing per-user Windows licensing instead of RDS Client Access Licenses (CALs).


Reference:

https://learn.microsoft.com/en-us/azure/virtual-desktop/windows-multisession-faq



You have an Azure Virtual Desktop deployment.

You need to add a new application for a RemoteApp application group. The application must be available only during a user session.

What should you use as an application source?

  1. FSLogix Profile Container
  2. file path
  3. start menu
  4. app attach

Answer(s): D

Explanation:

Publish applications with RemoteApp in Azure Virtual Desktop There are two ways to make applications available to users in Azure Virtual Desktop: as part of a full desktop or as individual applications with RemoteApp. You publish applications by adding them to an application group, which is associated with a host pool and workspace, and assigned to users.
You publish applications in the following scenarios:
*-> For RemoteApp application groups, you publish applications to stream remotely that are installed locally on session hosts or delivered dynamically using app attach and MSIX app attach and presented to users as individual applications in one of the supported Remote Desktop clients.
* For desktop application groups, you can only publish a full desktop and all applications in MSIX packages using MSIX app attach to appear in the user's start menu in a desktop session. If you use app attach, applications aren't added to a desktop application group.


Reference:

https://learn.microsoft.com/en-us/azure/virtual-desktop/publish-applications-stream-remoteapp



You have an Azure subscription that contains an Azure Virtual Desktop deployment. The deployment contains a host pool named Pool.

Users access the deployment by using the Windows client for Azure Virtual Desktop.

You need to ensure that the users must reauthenticate every eight hours. The solution must minimize administrative effort.

What should you do?

  1. From the Microsoft Entra admin center, create a Conditional Access policy.
  2. From the Microsoft Entra admin center, configure the User settings.
  3. Define Pool1 as a validation environment.
  4. For each session host, configure just-in-time (JIT) VM access.

Answer(s): A

Explanation:

First create a Conditional Access policy
Configure sign-in frequency
To optionally configure the time period before a user is asked to sign-in again:
1. Open the policy you created previously.
2. Under Assignments, select Access controls > Session. On the right, select Sign-in frequency. Set the value for the time period before a user is asked to sign-in again, and then select Select. For example, setting the value to 1 and the unit to Hours, will require multi-factor authentication if a connection is launched over an hour after the last one.
3. At the bottom of the page, under Enable policy select Save.


Reference:

https://learn.microsoft.com/en-us/azure/virtual-desktop/set-up-mfa



You have an Azure Virtual Desktop host pool named Pool1. All the session hosts in Pool1 are assigned private IP addresses only.

You need to ensure that administrators can connect remotely to the session hosts. The solution must ensure that the administrators can connect to the session hosts by using Azure Command-Line Interface (CLI) and the Remote Desktop client for Windows.

What should you include in the solution?

  1. Azure Application Gateway WAF_v2
  2. Azure Front Door Standard
  3. Azure Bastion Standard
  4. Azure Application Gateway Standard_v2

Answer(s): C

Explanation:

Azure Bastion is a new fully platform-managed PaaS service you provision inside your virtual network. It provides secure and seamless RDP/SSH connectivity to your VMs directly in the Azure portal over SSL.
When you connect via Azure Bastion, your virtual machines do not need a public IP address.


Reference:

https://azure.microsoft.com/en-us/services/azure-bastion/



Viewing page 28 of 67
Viewing questions 136 - 140 out of 372 questions


Post your Comments and Discuss Microsoft AZ-140 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!