You save $69.98
AZ-140 Premium Bundle
- Premium File 372 Questions & Answers
- Last Update: Oct 25, 2026
- Training Course 79 Lectures
- Study Guide 430 Pages
You save $69.98
An administrator needs to correct the following: A call center wants a desktop resource visible only to an authorized employee group. Which action is most relevant?
Create the appropriate application group and assign the relevant Microsoft Entra security group. AVD application group assignments control which users are entitled to publishable desktop resources. This action directly addresses the conditions in the scenario.
Disable drain mode after verifying the host is healthy and ready for user traffic. This would be appropriate for the different task-specific situation "A host in drain mode remains excluded from fresh connections after patch maintenance finishes", because A session host stays unavailable for new placements until its drain state is removed. It does not directly resolve the stated condition, which calls for Create the appropriate application group and assign the relevant Microsoft Entra security group.
Include the supported agent and registration process after VM provisioning. This would be appropriate for the different task-specific situation "A PowerShell automation creates only session-host Azure VMs but never registers their AVD agent", because AVD service placement depends on completed host-pool registration, not simply Azure VM creation. It does not directly resolve the stated condition, which calls for Create the appropriate application group and assign the relevant Microsoft Entra security group.
Expand or select suitable subnets with free addresses and rerun deployment. This would be appropriate for the different task-specific situation "A deployment chooses a subnet with no remaining IP addresses and newly provisioned session hosts fail to start", because Every session host NIC requires an address from its assigned Azure virtual network subnet. It does not directly resolve the stated condition, which calls for Create the appropriate application group and assign the relevant Microsoft Entra security group.
For the scenario "A cloud-only Entra user needs to reach a domain-dependent SMB profile share with unsupported identity configuration", a team selects "Select a supported Azure Files identity approach such as Microsoft Entra Kerberos and validate all prerequisites". Which technical principle best explains why it works?
FSLogix profile storage authentication must be compatible with the host's chosen join and user identity model. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Application group entitlement cannot override a host policy that explicitly denies the requested logon type. This describes the separate situation "A workstation group applies a GPO that denies remote interactive logon to the very users assigned to AVD" but does not justify the selected fix for the current issue. The decisive behavior is: FSLogix profile storage authentication must be compatible with the host's chosen join and user identity model.
Azure RBAC rights do not automatically extend to unrelated subscriptions outside the assignment scope. This describes the separate situation "A host pool administrator attempts to manage AVD resources across subscriptions using a role assigned in only one subscription" but does not justify the selected fix for the current issue. The decisive behavior is: FSLogix profile storage authentication must be compatible with the host's chosen join and user identity model.
Conditional Access evaluation requires the targeted service sign-in to match the policy's cloud app scope. This describes the separate situation "A Conditional Access policy is configured for the wrong enterprise cloud app and never challenges AVD clients" but does not justify the selected fix for the current issue. The decisive behavior is: FSLogix profile storage authentication must be compatible with the host's chosen join and user identity model.
The Azure Virtual Desktop team plans to "Check Windows App client support, Teams versions and installed redirection components" because: A help desk reports that the Teams optimization status shows not optimized for a portion of users. Which explanation supports the plan?
Media optimization depends on compatibility across the endpoint client and session-host software. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Application lifecycle controls determine availability, whereas user profile preservation is a separate concern. This describes the separate situation "An organization must remove an unapproved application from all new AVD sessions while preserving existing profiles" but does not justify the selected fix for the current issue. The decisive behavior is: Media optimization depends on compatibility across the endpoint client and session-host software.
Packaging must preserve the executable's required runtime dependencies for successful remote launch. This describes the separate situation "A packaged application depends on a DLL that was omitted during MSIX preparation and fails to launch" but does not justify the selected fix for the current issue. The decisive behavior is: Media optimization depends on compatibility across the endpoint client and session-host software.
Not every Windows application can be delivered as a suitable App attach package without modification. This describes the separate situation "An MSI installer modifies Windows services and is incompatible with dynamic App attach packaging" but does not justify the selected fix for the current issue. The decisive behavior is: Media optimization depends on compatibility across the endpoint client and session-host software.
An enterprise AVD deployment has this requirement: The team wants to identify whether AVD sessions used UDP Shortpath or TCP fallback during a fault. Choose the most appropriate implementation.
Inspect session connection information and AVD diagnostic connection records for transport details. Connection transport telemetry distinguishes the user data path independently of general VM health metrics. This action directly addresses the conditions in the scenario.
Upgrade supported Windows App clients and confirm version prerequisites and multipath status. This would be appropriate for the different task-specific situation "Windows App clients running obsolete builds do not display the expected RDP Multipath transport options", because RDP Multipath feature availability depends on supported client platforms and minimum Windows App versions. It does not directly resolve the stated condition, which calls for Inspect session connection information and AVD diagnostic connection records for transport details.
Compare client path diagnostics, public endpoint reachability and ISP routing before rebuilding session hosts. This would be appropriate for the different task-specific situation "A help desk sees healthy host availability but only one ISP reports failed client-to-service connections", because Client-side internet path failures can prevent broker access without any failure in Azure session-host resources. It does not directly resolve the stated condition, which calls for Inspect session connection information and AVD diagnostic connection records for transport details.
Validate managed-network RDP Shortpath prerequisites and permitted UDP reachability between client and session host. This would be appropriate for the different task-specific situation "Session hosts connect to an on-premises domain controller over ExpressRoute but user sessions still take TCP reverse-connect paths", because RDP Shortpath over a managed network can establish direct UDP transport when client and host have suitable private connectivity. It does not directly resolve the stated condition, which calls for Inspect session connection information and AVD diagnostic connection records for transport details.
A support engineer corrects "A deployment chooses a subnet with no remaining IP addresses and newly provisioned session hosts fail to start" by choosing "Expand or select suitable subnets with free addresses and rerun deployment". What mechanism makes that appropriate?
Every session host NIC requires an address from its assigned Azure virtual network subnet. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Session-host registration and ongoing broker signaling require reliable agent outbound communication. This describes the separate situation "A private host pool is created but none of its session hosts can reach required Microsoft AVD control endpoints" but does not justify the selected fix for the current issue. The decisive behavior is: Every session host NIC requires an address from its assigned Azure virtual network subnet.
AVD service placement depends on completed host-pool registration, not simply Azure VM creation. This describes the separate situation "A PowerShell automation creates only session-host Azure VMs but never registers their AVD agent" but does not justify the selected fix for the current issue. The decisive behavior is: Every session host NIC requires an address from its assigned Azure virtual network subnet.
Pooled host placement respects configured session limits and load-balancing behavior. This describes the separate situation "A pooled host receives far more simultaneous users than planned because its session cap is too high" but does not justify the selected fix for the current issue. The decisive behavior is: Every session host NIC requires an address from its assigned Azure virtual network subnet.
Consider this AVD design: Security events from Windows session hosts are not arriving at the central Log Analytics workspace. The action is "Validate Azure Monitor Agent health, data collection rules and workspace destinations". Which statement explains this choice?
Agent-based Windows event collection depends on matching collection rules and authorization. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Aggregated monitoring can reduce alert fatigue without losing evidence of a shared incident. This describes the separate situation "The operations team receives hundreds of identical AVD sign-in alerts during one regional network fault" but does not justify the selected fix for the current issue. The decisive behavior is: Agent-based Windows event collection depends on matching collection rules and authorization.
General VM metrics cannot replace the service-specific events that explain remote resource access failures. This describes the separate situation "A team uses a generic Azure VM dashboard and assumes it covers all AVD application group connection failures" but does not justify the selected fix for the current issue. The decisive behavior is: Agent-based Windows event collection depends on matching collection rules and authorization.
AVD scaling plans can deallocate surplus session hosts according to defined operating periods. This describes the separate situation "A pooled host pool runs all its VMs overnight even though no users connect" but does not justify the selected fix for the current issue. The decisive behavior is: Agent-based Windows event collection depends on matching collection rules and authorization.
For a deployment problem, "A pooled desktop host's maximum session limit causes users to wait although spare CPU exists on other hosts", administrators choose "Review host pool load balancing and session caps to distribute connections appropriately". Why does that solve it?
Placement settings can prevent optimal use of available pooled compute capacity. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Printer redirection can be restricted to reduce unnecessary device exposure and confusion. This describes the separate situation "Remote desktop users complain that every connection exposes all their local printers to a sensitive session" but does not justify the selected fix for the current issue. The decisive behavior is: Placement settings can prevent optimal use of available pooled compute capacity.
Session control operations are separate from persistent profile storage and application group configuration. This describes the separate situation "Help desk staff can see an active session that is unresponsive but do not want to delete its user profile" but does not justify the selected fix for the current issue. The decisive behavior is: Placement settings can prevent optimal use of available pooled compute capacity.
Windows printer selection rules can differ when locally redirected devices are present. This describes the separate situation "A remote help desk app prints to local devices but documents always use the wrong default printer" but does not justify the selected fix for the current issue. The decisive behavior is: Placement settings can prevent optimal use of available pooled compute capacity.
A support ticket states: A RemoteApp application group is configured but all users see the full desktop instead of the intended app. What is the most targeted remediation?
Check application group type and the published resource selected in the workspace. Full desktop and RemoteApp experiences are represented by different AVD application group resources. This action directly addresses the conditions in the scenario.
Validate both Teams optimization status and allowed client camera redirection policies. This would be appropriate for the different task-specific situation "Microsoft Teams calls work, but user cameras do not appear in sessions after a client policy change", because Teams real-time media and remote device redirection have separate compatibility and policy requirements. It does not directly resolve the stated condition, which calls for Check application group type and the published resource selected in the workspace.
Remove the app from the managed image or App attach entitlement and roll out a tested deployment change. This would be appropriate for the different task-specific situation "An organization must remove an unapproved application from all new AVD sessions while preserving existing profiles", because Application lifecycle controls determine availability, whereas user profile preservation is a separate concern. It does not directly resolve the stated condition, which calls for Check application group type and the published resource selected in the workspace.
Configure supported Teams optimization and validate its client and host components. This would be appropriate for the different task-specific situation "Microsoft Teams voice calls inside AVD consume excessive host CPU because media redirection is inactive", because Teams optimization can redirect eligible audio and video processing to the local endpoint. It does not directly resolve the stated condition, which calls for Check application group type and the published resource selected in the workspace.
The approved remediation for "Users lose their settings after session hosts are replaced using a new image version" is "Keep user profiles on FSLogix or another supported roaming store separate from the immutable host image". Which Azure or Windows behavior explains this?
Golden images manage machine configuration, while persistent user state requires an independent storage path. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Unfinished servicing operations can make a reusable image unreliable during VM customization. This describes the separate situation "A newly captured image includes pending Windows restart actions and fails first-boot provisioning" but does not justify the selected fix for the current issue. The decisive behavior is: Golden images manage machine configuration, while persistent user state requires an independent storage path.
Traceable image baselines simplify patch compliance and recovery from known OS regressions. This describes the separate situation "The team builds session host images without recording which Windows cumulative updates were present" but does not justify the selected fix for the current issue. The decisive behavior is: Golden images manage machine configuration, while persistent user state requires an independent storage path.
Ring-based image rollout limits the blast radius of unexpected driver or application incompatibilities. This describes the separate situation "A host pool rollout should test a new image without moving every user at once" but does not justify the selected fix for the current issue. The decisive behavior is: Golden images manage machine configuration, while persistent user state requires an independent storage path.
A change record states "Profile representative user workloads and calculate concurrent bandwidth with latency and headroom requirements" after observing "A call center is moving 900 concurrent users to Azure Virtual Desktop and lacks an estimate of peak RDP throughput". What is the key supporting principle?
Session density and display or multimedia behavior determine actual network capacity more reliably than the number of assigned users alone. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Private Link requires DNS resolution to direct supported service names to private endpoint addresses. This describes the separate situation "After creating an AVD private endpoint, connection feeds resolve to public destinations on managed clients" but does not justify the selected fix for the current issue. The decisive behavior is: Session density and display or multimedia behavior determine actual network capacity more reliably than the number of assigned users alone.
Azure Virtual Desktop's reverse-connect transport requires outbound connectivity from hosts instead of exposing inbound RDP ports to the internet. This describes the separate situation "Users connect to the AVD broker but all session hosts fail reverse-connect control channel initialization" but does not justify the selected fix for the current issue. The decisive behavior is: Session density and display or multimedia behavior determine actual network capacity more reliably than the number of assigned users alone.
Client-side internet path failures can prevent broker access without any failure in Azure session-host resources. This describes the separate situation "A help desk sees healthy host availability but only one ISP reports failed client-to-service connections" but does not justify the selected fix for the current issue. The decisive behavior is: Session density and display or multimedia behavior determine actual network capacity more reliably than the number of assigned users alone.
An administrator needs to correct the following: An organization needs to disable microphone capture inside remote desktops for a regulated user group. Which action is most relevant?
Configure approved audio capture redirection and device policies at the right assignment scope. RDP redirection controls the remote session's access to local recording devices. This action directly addresses the conditions in the scenario.
Deploy a supported Windows App client and validate subscription feed discovery. This would be appropriate for the different task-specific situation "Employees on Windows devices are migrating from a retired Remote Desktop app to current supported access", because Current Azure Virtual Desktop clients determine which remote experiences and transport features users can access. It does not directly resolve the stated condition, which calls for Configure approved audio capture redirection and device policies at the right assignment scope.
Use supported session management to disconnect or sign out the affected session after appropriate notification. This would be appropriate for the different task-specific situation "Help desk staff can see an active session that is unresponsive but do not want to delete its user profile", because Session control operations are separate from persistent profile storage and application group configuration. It does not directly resolve the stated condition, which calls for Configure approved audio capture redirection and device policies at the right assignment scope.
Standardize applicable Group Policy or Microsoft Intune configuration profiles for session hosts. This would be appropriate for the different task-specific situation "A shared host pool has inconsistent Start menu and Windows settings because user policies differ across OUs", because Windows policy processing determines user experience settings independently of the host pool resource definition. It does not directly resolve the stated condition, which calls for Configure approved audio capture redirection and device policies at the right assignment scope.
Please check your mailbox for a message from support@examlabs.com and follow the directions.