Free AZ-140 Exam Braindumps
Configuring and Operating Microsoft Azure Virtual Desktop Questions 73–125 (page: 34)

Updated On: 10-Feb-2026
View Related Case Study

HOTSPOT (Drag and Drop is not supported)

Which users can create Pool4, and which users can join session hosts to the domain? To answer, select the appropriate options in the answer area.

Note: Each correct selection is worth one point.

Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



You have an Azure Virtual Desktop host pool named Pool1 and an Azure Storage account named Storage1. Storage1 stores FSLogix profile containers in a share folder named share1.

You create a new group named Group1. You provide Group1 with permission to sign in to Pool1.

You need to ensure that the members of Group1 can store the FSLogix profile containers in share1. The solution must use the principle of least privilege.

Which two privileges should you assign to Group1? Each correct answer presents part of the solution.

Note: Each correct selection is worth one point.

  1. the Storage Blob Data Contributor role for storage1
  2. the List folder / read data NTFS permissions for share1
  3. the Modify NTFS permissions for share1
  4. the Storage File Data SMB Share Reader role for storage1
  5. the Storage File Data SMB Share Elevated Contributor role for storage1
  6. the Storage File Data SMB Share Contributor role for storage1

Answer(s): C,F


Reference:

https://docs.microsoft.com/en-us/azure/virtual-desktop/create-file-share



You have a Azure Virtual Desktop host pool.

You need to install Microsoft Antimalware for Azure on the session hosts.

What should you do?

  1. Add an extension to each session host.
  2. From a Group Policy Object (GPO), enable Windows 10 security features.
  3. Configure the RDP Properties of the host pool.
  4. Sign in to each session host and install a Windows feature.

Answer(s): A


Reference:

https://docs.microsoft.com/en-us/azure/security/fundamentals/antimalware



HOTSPOT (Drag and Drop is not supported)

You have a Azure Virtual Desktop deployment.

You need to ensure that all the connections to the managed resources in the host pool require multi-factor authentication (MFA).

Which two settings should you modify in a conditional access policy? To answer, select the appropriate options in the answer area.

Note: Each correct selection is worth one point.

Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:


Reference:

https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-azure-mfa



HOTSPOT (Drag and Drop is not supported)

Your company has the offices shown in the following table.



The company has a Microsoft Entra tenant named contoso.com that contains a user named User1.

Users connect to a Azure Virtual Desktop deployment named AVD1. AVD1 contains session hosts that have public IP addresses from the 52.166.253.0/24 subnet.

Contoso.com has a conditional access policy that has the following settings:

Name: Policy1

Assignments:

- Users and groups: User1
- Cloud apps or actions: Azure Virtual Desktop

Access controls:

- Grant: Grant access, Require multi-factor authentication
Enable policy: On

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Note: Each correct selection is worth one point.

Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:


Reference:

https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-azure-mfa



Viewing page 34 of 67
Viewing questions 166 - 170 out of 372 questions


Post your Comments and Discuss Microsoft AZ-140 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!