HOTSPOT (Drag and Drop is not supported)You have a Microsoft Entra tenant named contoso.com that contains cloud-only user accounts.You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains session hosts that are joined to contoso.com.You plan to use FSLogix profile containers to manage user profiles.You need to configure storage for the FSLogix solution.Which type of storage should you use for the profile containers, and which FSLogix registry key should you configure? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:
Answer(s): A
Box 1: Azure file sharesStorage typeUser profile management for Azure Virtual Desktop with FSLogix profile containersSet up FSLogix Profile Container with Azure Files and Active Directory Domain Services or Microsoft Entra Domain ServicesTo ensure your Azure Virtual Desktop environment follows best practices:* We recommend you use Azure Files or Azure NetApp Files to store profile containers.* Etc.Box 2: HKLM:\SOFTWARE\FSLogix\profiles\VHDLocationsRegistry keyTo configure Profile Container, we recommend you use Group Policy Preferences to set registry keys and values at scale across all your session hosts. You can also set these in your custom image.To configure Profile Container on your session host VMs:1. Sign in to the VM used to create your custom image or a session host VM from your host pool.2. If you need to install or update FSLogix Apps, download the latest version of FSLogix and install it by running FSLogixAppsSetup.exe, then following the instructions in the setup wizard. For more details about the installation process, including customizations and unattended installation, see Download and Install FSLogix.3. Open an elevated PowerShell prompt and run the following commands, replacing \\<storage-account- name>.file.core.windows.net\<share-name> with the UNC path to your storage account you created earlier. These commands enable Profile Container and configure the location of the share.$regPath = "HKLM:\SOFTWARE\FSLogix\profiles"New-ItemProperty -Path $regPath -Name Enabled -PropertyType DWORD -Value 1 -Force New-ItemProperty -Path $regPath -Name VHDLocations -PropertyType MultiString -Value \\<storage-account- name>.file.core.windows.net\<share-name> -Force4. Restart the VM used to create your custom image or a session host VM. You will need to repeat these steps for any remaining session host VMs.
https://learn.microsoft.com/en-us/azure/virtual-desktop/fslogix-profile-containers https://learn.microsoft.com/en-us/azure/virtual-desktop/fslogix-profile-container-configure-azure-files-active- directory
You have an Azure subscription named Sub1 and a Microsoft 365 E5 subscription.The tenant contains user accounts for all internal users and users from a partner company named Fabrikam, Inc. Each internal user is assigned a Microsoft 365 E5 license. The users at Fabrikam are not assigned any licenses.Sub1 has an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains a RemoteApp named App1.You need to configure access to App1. The solution must meet the following requirements:The Fabrikam users must be licensed by using Per-user access pricing.App1 must be accessible to all the internal and Fabrikam users.Costs must be minimized.What should you do first?
You have an Azure Virtual Desktop deployment that contains the host pools shown in the following table.You plan to use app attach.In which host pools can the session hosts use app attach?
You have an Azure Virtual Desktop deployment that contains a host pool named Pool1.Pool1 contains two session hosts that are Microsoft Entra joined.You need to configure single sign-on (SSO) to connect to the session hosts. The solution must enable Microsoft Entra authentication for Remote Desktop Protocol (RDP) in the Microsoft Entra tenant.Which application requires that you modify the remoteDesktopSecurityConfiguration object?
Enable Microsoft Entra authentication for RDPYou must first allow Microsoft Entra authentication for Windows in your Microsoft Entra tenant, which enables issuing RDP access tokens allowing users to sign in to your Azure Virtual Desktop session hosts. You set the isRemoteDesktopProtocolEnabled property to true on the service principal's remoteDesktopSecurityConfiguration object for the following Microsoft Entra applications:* Microsoft Remote Desktop a4a365df-50f1-4397-bc59-1a1564b8bb9c*-> Windows Cloud Login270efc09-cd0d-444b-a71f-39af4910ec45
https://learn.microsoft.com/en-us/azure/virtual-desktop/configure-single-sign-on
You have a Microsoft Entra hybrid tenant that contains the users shown in the following table.You deploy Microsoft Entra joined Azure Virtual Desktop session hosts.Which users support the use of FSLogix application rule sets?
Answer(s): B
Can I use FSLogix application rule sets with Microsoft Entra ID and cloud-only identities? No. Application rule sets only work with traditional Active Directory SID(s). Hybrid (sync'd) identities work as long as the virtual machine has line of sight to a Domain Controller.
https://learn.microsoft.com/en-us/fslogix/overview-faq
Post your Comments and Discuss Microsoft AZ-140 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AZ-140 content, but please register or login to continue.