You save $69.98
An administrator needs to correct the following: The business requires users to see a curated set of resources after signing in to Windows App. Which action is most relevant?
Associate authorized application groups with the workspace and verify assignments and feed refresh. AVD workspaces are the discovery grouping for users' published desktops and RemoteApps. This action directly addresses the conditions in the scenario.
Configure Universal Print or another supported remote printing workflow with user permissions. This would be appropriate for the different task-specific situation "Office employees cannot print to a managed company printer from remote AVD sessions", because Printer availability depends on the configured print service and the session's printer redirection policy. It does not directly resolve the stated condition, which calls for Associate authorized application groups with the workspace and verify assignments and feed refresh.
Update the personal host pool's user-to-desktop assignment through supported management tools. This would be appropriate for the different task-specific situation "A personal desktop user changes departments and their persistent VM should be reassigned to a colleague", because Personal desktop ownership mappings control which user receives a dedicated session-host VM. It does not directly resolve the stated condition, which calls for Associate authorized application groups with the workspace and verify assignments and feed refresh.
Choose a current supported AVD client for the device platform or use a compatible web client. This would be appropriate for the different task-specific situation "An administrator deploys a Remote Desktop client to an unsupported operating system and users cannot authenticate", because Client support is platform-specific, and not every remote access feature works on every device. It does not directly resolve the stated condition, which calls for Associate authorized application groups with the workspace and verify assignments and feed refresh.
An Azure Virtual Desktop administrator observes: Users in a distant geography report high interactive latency while all session hosts are placed in one remote Azure region. Which response directly addresses this issue?
Compare client geography and Azure region round-trip latency before selecting a better session-host placement. Remote display performance depends on round-trip distance as well as application resource allocation. This action directly addresses the conditions in the scenario.
Explain that RDP Multipath maintains alternate session transport paths and switches as network quality changes. This would be appropriate for the different task-specific situation "A network architect expects RDP Multipath to aggregate the bandwidth of five independent user desktops into one session", because RDP Multipath improves session resilience with monitored active and backup paths rather than merging multiple unrelated users into one connection. It does not directly resolve the stated condition, which calls for Compare client geography and Azure region round-trip latency before selecting a better session-host placement.
Prefer the approved private managed-network RDP Shortpath path where prerequisites are met. This would be appropriate for the different task-specific situation "A desktop environment has direct ExpressRoute connectivity but its security team proposes routing RDP through the public internet anyway", because Managed-network UDP transport can keep client-to-host RDP data on the private routed connection. It does not directly resolve the stated condition, which calls for Compare client geography and Azure region round-trip latency before selecting a better session-host placement.
Design Azure Virtual Desktop Private Link with appropriate private endpoints and published feature prerequisites. This would be appropriate for the different task-specific situation "A regulated desktop deployment must keep supported AVD service connections on private access paths", because AVD Private Link can restrict supported service connection traffic to private network access rather than public service endpoints. It does not directly resolve the stated condition, which calls for Compare client geography and Azure region round-trip latency before selecting a better session-host placement.
A Microsoft AZ-140 deployment review finds: New Entra joined session hosts have correct AVD registration but users are rejected at Windows interactive sign-in. What is the best corrective action?
Verify applicable AVD login role assignments, user identity eligibility and session host sign-in settings. Azure Virtual Desktop resource assignment does not automatically grant every underlying Windows login right. This action directly addresses the conditions in the scenario.
Test domain controller DNS discovery and authentication ports for the session-host network. This would be appropriate for the different task-specific situation "A hybrid identity deployment has users in Entra but on-premises Kerberos ticket requests fail through the VPN", because AD DS authentication to domain-joined session hosts requires reliable domain controller access. It does not directly resolve the stated condition, which calls for Verify applicable AVD login role assignments, user identity eligibility and session host sign-in settings.
Assign a managed Microsoft Entra security group to the RemoteApp application group. This would be appropriate for the different task-specific situation "An IT group wants to make membership automatically determine who sees a published RemoteApp", because Group-based application group assignments simplify AVD resource entitlement as people join or leave teams. It does not directly resolve the stated condition, which calls for Verify applicable AVD login role assignments, user identity eligibility and session host sign-in settings.
Plan managed domain network reachability and DNS settings for the intended session-host VNet. This would be appropriate for the different task-specific situation "An Entra Domain Services deployment is proposed without confirming its managed domain DNS and network requirements", because Managed domain authentication depends on the session hosts locating Entra Domain Services controllers. It does not directly resolve the stated condition, which calls for Verify applicable AVD login role assignments, user identity eligibility and session host sign-in settings.
An AZ-140 reviewer recommends "Validate each proposed user's AVD access licensing and supported entitlement before rollout" for the issue "Contractors need AVD desktops but their identity and Microsoft license eligibility are unclear". Which underlying behavior is decisive?
Remote access rights depend on the chosen AVD operating system, user population and licensing model. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Persistent desktop identity and VM power schedules are separate settings that must be compatible. This describes the separate situation "A user needs a persistent personal VM while administrators plan to deallocate all hosts nightly" but does not justify the selected fix for the current issue. The decisive behavior is: Remote access rights depend on the chosen AVD operating system, user population and licensing model.
The maximum session limit constrains placement but must be derived from workload and VM memory performance. This describes the separate situation "Pooled session hosts become unstable after more simultaneous logons than memory capacity supports" but does not justify the selected fix for the current issue. The decisive behavior is: Remote access rights depend on the chosen AVD operating system, user population and licensing model.
Personal and pooled host pool types have different user-assignment and session-placement behavior. This describes the separate situation "A proposed architecture places a personal desktop and a shared pooled desktop in one host pool" but does not justify the selected fix for the current issue. The decisive behavior is: Remote access rights depend on the chosen AVD operating system, user population and licensing model.
A support engineer corrects "A deployed Conditional Access policy blocks emergency administrators from recovering a failed host pool" by choosing "Plan protected break-glass accounts and exclusions consistent with identity security policy". What mechanism makes that appropriate?
Emergency access procedures reduce the risk of total administrative lockout from a failed Conditional Access configuration. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Application group entitlement cannot override a host policy that explicitly denies the requested logon type. This describes the separate situation "A workstation group applies a GPO that denies remote interactive logon to the very users assigned to AVD" but does not justify the selected fix for the current issue. The decisive behavior is: Emergency access procedures reduce the risk of total administrative lockout from a failed Conditional Access configuration.
FSLogix profile storage authentication must be compatible with the host's chosen join and user identity model. This describes the separate situation "A cloud-only Entra user needs to reach a domain-dependent SMB profile share with unsupported identity configuration" but does not justify the selected fix for the current issue. The decisive behavior is: Emergency access procedures reduce the risk of total administrative lockout from a failed Conditional Access configuration.
Azure RBAC rights do not automatically extend to unrelated subscriptions outside the assignment scope. This describes the separate situation "A host pool administrator attempts to manage AVD resources across subscriptions using a role assigned in only one subscription" but does not justify the selected fix for the current issue. The decisive behavior is: Emergency access procedures reduce the risk of total administrative lockout from a failed Conditional Access configuration.
Consider this AVD design: An administrator deploys a Remote Desktop client to an unsupported operating system and users cannot authenticate. The action is "Choose a current supported AVD client for the device platform or use a compatible web client". Which statement explains this choice?
Client support is platform-specific, and not every remote access feature works on every device. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Session control operations are separate from persistent profile storage and application group configuration. This describes the separate situation "Help desk staff can see an active session that is unresponsive but do not want to delete its user profile" but does not justify the selected fix for the current issue. The decisive behavior is: Client support is platform-specific, and not every remote access feature works on every device.
Remote session timeout policies can terminate abandoned sessions to free pooled capacity. This describes the separate situation "A user disconnects and leaves an idle session consuming capacity for many hours" but does not justify the selected fix for the current issue. The decisive behavior is: Client support is platform-specific, and not every remote access feature works on every device.
Windows printer selection rules can differ when locally redirected devices are present. This describes the separate situation "A remote help desk app prints to local devices but documents always use the wrong default printer" but does not justify the selected fix for the current issue. The decisive behavior is: Client support is platform-specific, and not every remote access feature works on every device.
A remote desktop service needs to resolve this condition: An AVD pooled host pool is set to depth-first but administrators expect new sessions spread equally. Select the best approach.
Switch to breadth-first load balancing if even distribution is the desired operation. Breadth-first and depth-first place sessions differently across available pooled hosts. This action directly addresses the conditions in the scenario.
Choose the supported desktop or RemoteApp group types and publish through the intended workspace. This would be appropriate for the different task-specific situation "A host-pool administrator tries to place desktop and RemoteApp entitlements in incompatible application group arrangements", because Desktop and RemoteApp application groups represent different resource presentation and assignment models. It does not directly resolve the stated condition, which calls for Switch to breadth-first load balancing if even distribution is the desired operation.
Configure Start VM on Connect and the required platform permissions for the personal host pool. This would be appropriate for the different task-specific situation "The IT team wants to turn on a powered-off personal VM only when its assigned user connects", because Start VM on Connect permits a supported AVD connection attempt to initiate a deallocated session host VM. It does not directly resolve the stated condition, which calls for Switch to breadth-first load balancing if even distribution is the desired operation.
Verify app group assignments, session host availability and pool session limits. This would be appropriate for the different task-specific situation "Users see a desktop resource but receive a no-resources-available message when opening it", because Successful feed discovery does not guarantee any eligible healthy host can accept a new session. It does not directly resolve the stated condition, which calls for Switch to breadth-first load balancing if even distribution is the desired operation.
A platform team addresses "A host pool must be retired but some users still have active sessions and unsaved documents" with "Drain hosts, notify users and schedule a controlled sign-out and resource decommissioning sequence". Which technical detail justifies the response?
Decommissioning while users are active can lose unsaved work or interrupt profile disk detach. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Recoverable bytes are insufficient if restored profiles cannot be authenticated and accessed. This describes the separate situation "A profile backup restore test succeeds but its recovered SMB ACLs prevent users from mounting VHDs" but does not justify the selected fix for the current issue. The decisive behavior is: Decommissioning while users are active can lose unsaved work or interrupt profile disk detach.
Versioned image artifacts permit controlled restoration of a known-good desktop baseline. This describes the separate situation "A desktop outage occurs after a new golden image is released and operations have no safe rollback version" but does not justify the selected fix for the current issue. The decisive behavior is: Decommissioning while users are active can lose unsaved work or interrupt profile disk detach.
Backup recovery is more resilient when an attacker cannot easily erase production and recovery data together. This describes the separate situation "A user profile store is deleted maliciously and snapshots are accessible to the same broad administrator group" but does not justify the selected fix for the current issue. The decisive behavior is: Decommissioning while users are active can lose unsaved work or interrupt profile disk detach.
The approved remediation for "A successful RDP connection suffers intermittent audio gaps only when UDP loss spikes" is "Correlate user session transport statistics with packet loss, jitter and WAN link congestion". Which Azure or Windows behavior explains this?
Real-time media quality is particularly sensitive to packet loss and unstable transport timing. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
AVD Private Link can restrict supported service connection traffic to private network access rather than public service endpoints. This describes the separate situation "A regulated desktop deployment must keep supported AVD service connections on private access paths" but does not justify the selected fix for the current issue. The decisive behavior is: Real-time media quality is particularly sensitive to packet loss and unstable transport timing.
Private Link requires DNS resolution to direct supported service names to private endpoint addresses. This describes the separate situation "After creating an AVD private endpoint, connection feeds resolve to public destinations on managed clients" but does not justify the selected fix for the current issue. The decisive behavior is: Real-time media quality is particularly sensitive to packet loss and unstable transport timing.
Client-side internet path failures can prevent broker access without any failure in Azure session-host resources. This describes the separate situation "A help desk sees healthy host availability but only one ISP reports failed client-to-service connections" but does not justify the selected fix for the current issue. The decisive behavior is: Real-time media quality is particularly sensitive to packet loss and unstable transport timing.
An architect must address this AVD condition: An accounting application should be published without giving the team a full shared Windows desktop. What should the team implement?
Create an AVD RemoteApp application group and add the required executable entry. RemoteApp groups publish individual application experiences to authorized users. This action directly addresses the conditions in the scenario.
Validate both Teams optimization status and allowed client camera redirection policies. This would be appropriate for the different task-specific situation "Microsoft Teams calls work, but user cameras do not appear in sessions after a client policy change", because Teams real-time media and remote device redirection have separate compatibility and policy requirements. It does not directly resolve the stated condition, which calls for Create an AVD RemoteApp application group and add the required executable entry.
Configure and validate shared computer activation for eligible Microsoft 365 Apps installations. This would be appropriate for the different task-specific situation "A shared Windows multi-session host prompts each Microsoft 365 Apps user to activate Office as if it were a personal machine", because Shared computer activation enables supported Microsoft 365 Apps licensing on shared-session environments. It does not directly resolve the stated condition, which calls for Create an AVD RemoteApp application group and add the required executable entry.
Use the supported per-machine OneDrive installation and multi-session policy configuration. This would be appropriate for the different task-specific situation "An administrator installs OneDrive in a single user's profile and expects all pooled users to receive it", because OneDrive on shared desktop hosts must use an installation and setup mode supported for multiple users. It does not directly resolve the stated condition, which calls for Create an AVD RemoteApp application group and add the required executable entry.
An administrator needs to correct the following: Azure Policy audit shows AVD session-host disks without required encryption configuration. Which action is most relevant?
Apply a supported disk encryption approach and audit compliance against the policy. Storage encryption controls protect data at rest independently of access-control lists. This action directly addresses the conditions in the scenario.
Deploy supported Trusted Launch session host VM configurations with Secure Boot and vTPM. This would be appropriate for the different task-specific situation "A regulated desktop service requires Secure Boot and a virtual TPM for supported VM images", because Trusted Launch adds protections against selected boot-level and platform integrity attacks. It does not directly resolve the stated condition, which calls for Apply a supported disk encryption approach and audit compliance against the policy.
Delegate approved management access through narrowly scoped Azure and Windows administrative roles. This would be appropriate for the different task-specific situation "An administrator needs to troubleshoot a live host's vulnerability without giving broad local admin privileges to all help desk staff", because Least-privilege role separation limits the number of principals able to modify session-host configuration. It does not directly resolve the stated condition, which calls for Apply a supported disk encryption approach and audit compliance against the policy.
Investigate Defender for Endpoint alerts and isolate affected hosts when authorized. This would be appropriate for the different task-specific situation "Security engineers need to determine whether malicious user processes are performing credential theft on a shared host", because EDR findings support controlled endpoint investigation and containment of suspicious behavior. It does not directly resolve the stated condition, which calls for Apply a supported disk encryption approach and audit compliance against the policy.
Please check your mailbox for a message from support@examlabs.com and follow the directions.
