You save $69.98
AZ-140 Premium Bundle
- Premium File 372 Questions & Answers
- Last Update: Oct 25, 2026
- Training Course 79 Lectures
- Study Guide 430 Pages
You save $69.98
An administrator needs to correct the following: An organization needs to disable microphone capture inside remote desktops for a regulated user group. Which action is most relevant?
Configure approved audio capture redirection and device policies at the right assignment scope. RDP redirection controls the remote session's access to local recording devices. This action directly addresses the conditions in the scenario.
Deploy a supported Windows App client and validate subscription feed discovery. This would be appropriate for the different task-specific situation "Employees on Windows devices are migrating from a retired Remote Desktop app to current supported access", because Current Azure Virtual Desktop clients determine which remote experiences and transport features users can access. It does not directly resolve the stated condition, which calls for Configure approved audio capture redirection and device policies at the right assignment scope.
Use supported session management to disconnect or sign out the affected session after appropriate notification. This would be appropriate for the different task-specific situation "Help desk staff can see an active session that is unresponsive but do not want to delete its user profile", because Session control operations are separate from persistent profile storage and application group configuration. It does not directly resolve the stated condition, which calls for Configure approved audio capture redirection and device policies at the right assignment scope.
Standardize applicable Group Policy or Microsoft Intune configuration profiles for session hosts. This would be appropriate for the different task-specific situation "A shared host pool has inconsistent Start menu and Windows settings because user policies differ across OUs", because Windows policy processing determines user experience settings independently of the host pool resource definition. It does not directly resolve the stated condition, which calls for Configure approved audio capture redirection and device policies at the right assignment scope.
An Azure Virtual Desktop administrator observes: A customer requires GPU-intensive design apps but cannot find its selected GPU VM family in the planned region. Which response directly addresses this issue?
Check VM family regional availability and quota before committing to a host pool design. Azure VM SKU and GPU availability varies by region and subscription quota. This action directly addresses the conditions in the scenario.
Plan independent compute, identity and profile storage recovery in a supported secondary region. This would be appropriate for the different task-specific situation "A disaster recovery requirement demands desktops in a second Azure region when the primary region fails", because Host pools alone do not guarantee user access if regional compute or profile storage remains unavailable. It does not directly resolve the stated condition, which calls for Check VM family regional availability and quota before committing to a host pool design.
Use separate host pools and resource governance boundaries where different controls are required. This would be appropriate for the different task-specific situation "An organization needs different security policy scope for high-risk developers and ordinary staff", because Pool separation supports divergent VM baseline, app and access-policy requirements. It does not directly resolve the stated condition, which calls for Check VM family regional availability and quota before committing to a host pool design.
Separate resources into resource groups matching environment ownership and management boundaries. This would be appropriate for the different task-specific situation "Development and production host pools share one resource group despite very different lifecycle needs", because Azure resource groups establish a lifecycle and permission scope for related managed resources. It does not directly resolve the stated condition, which calls for Check VM family regional availability and quota before committing to a host pool design.
A Microsoft AZ-140 deployment review finds: A platform team must reproduce the same AVD host pool topology across staging and production. What is the best corrective action?
Use supported Bicep or ARM templates with parameterized environment values and reviewed deployment stages. Declarative Azure deployments make repeatable host-pool resource creation less dependent on portal clicks. This action directly addresses the conditions in the scenario.
Confirm the required RDS licensing model and configure valid licensing servers or entitlement as applicable. This would be appropriate for the different task-specific situation "Windows Server session hosts are deployed for pooled desktops but the organization has not planned RDS CALs", because Windows Server-hosted remote sessions have RDS licensing obligations distinct from Windows Enterprise multi-session rights. It does not directly resolve the stated condition, which calls for Use supported Bicep or ARM templates with parameterized environment values and reviewed deployment stages.
Review domain DNS reachability, join credentials and domain-join extension logs before rerunning. This would be appropriate for the different task-specific situation "A deployment creates a session host image but the VM extension reports a failure to join the AD DS domain", because Domain-joined session hosts require the VM to contact and authenticate with suitable domain services. It does not directly resolve the stated condition, which calls for Use supported Bicep or ARM templates with parameterized environment values and reviewed deployment stages.
Remove or repair stale session-host registration records and register the new agent safely. This would be appropriate for the different task-specific situation "A session host VM is rebuilt with the same name but its old AVD registration object remains unhealthy", because Host-pool inventory and Azure VM resources may need reconciliation after destructive replacement. It does not directly resolve the stated condition, which calls for Use supported Bicep or ARM templates with parameterized environment values and reviewed deployment stages.
An enterprise AVD deployment has this requirement: Development and production host pools share one resource group despite very different lifecycle needs. Choose the most appropriate implementation.
Separate resources into resource groups matching environment ownership and management boundaries. Azure resource groups establish a lifecycle and permission scope for related managed resources. This action directly addresses the conditions in the scenario.
Choose supported Windows 11 Enterprise multi-session images in a pooled AVD deployment. This would be appropriate for the different task-specific situation "A company needs Windows 11 multi-session desktops for eligible Microsoft 365 users", because Windows Enterprise multi-session is designed for shared Azure Virtual Desktop session-host experiences. It does not directly resolve the stated condition, which calls for Separate resources into resource groups matching environment ownership and management boundaries.
Test workload isolation, sizing and optimized application delivery before changing the entire assignment model. This would be appropriate for the different task-specific situation "A planning team proposes replacing all pooled desktops with personal VMs after noticing one application's high CPU use", because A single resource-intensive app does not by itself prove every user needs dedicated desktop infrastructure. It does not directly resolve the stated condition, which calls for Separate resources into resource groups matching environment ownership and management boundaries.
Size host pool capacity and profile storage for sign-in bursts rather than only daily average load. This would be appropriate for the different task-specific situation "A capacity report shows brief 200-percent login spikes before employees start their shifts", because Logon storms create short-lived authentication, disk and CPU spikes that sustained averages can hide. It does not directly resolve the stated condition, which calls for Separate resources into resource groups matching environment ownership and management boundaries.
The operations team reports the following symptom: A new Windows App release must reach all managed corporate laptops consistently. Which action should be taken first?
Deploy and update the approved client through Microsoft Intune or another managed software channel. Central client deployment reduces version drift and ensures supported feature availability. This action directly addresses the conditions in the scenario.
Verify compatible client versions and AVD Teams optimization components and settings. This would be appropriate for the different task-specific situation "Screen sharing through a remote desktop performs poorly because Teams media optimization is not active", because Teams multimedia optimization can offload real-time media processing to the client when all prerequisites are met. It does not directly resolve the stated condition, which calls for Deploy and update the approved client through Microsoft Intune or another managed software channel.
Adjust the supported session time limits to match security and operational requirements. This would be appropriate for the different task-specific situation "A workload requires prolonged unattended remote sessions, but an aggressive session-limit policy disconnects users", because Timeout policies must balance resource reclamation with legitimate long-running remote work. It does not directly resolve the stated condition, which calls for Deploy and update the approved client through Microsoft Intune or another managed software channel.
Use supported session management to disconnect or sign out the affected session after appropriate notification. This would be appropriate for the different task-specific situation "Help desk staff can see an active session that is unresponsive but do not want to delete its user profile", because Session control operations are separate from persistent profile storage and application group configuration. It does not directly resolve the stated condition, which calls for Deploy and update the approved client through Microsoft Intune or another managed software channel.
Consider this AVD design: An image management process stores all custom versions under an unversioned single file name. The action is "Adopt explicit Compute Gallery image definitions and semantic versions for release tracking". Which statement explains this choice?
Image version metadata supports traceable promotion and rollback among tested desktop baselines. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Image creation success does not prove end-user compatibility or permission correctness. This describes the separate situation "An image builder pipeline succeeds but installed line-of-business applications fail the first standard-user login" but does not justify the selected fix for the current issue. The decisive behavior is: Image version metadata supports traceable promotion and rollback among tested desktop baselines.
Cloning a unique joined-machine identity can create domain trust and management conflicts. This describes the separate situation "A domain-joined source VM is captured with its existing computer account and deployed to dozens of hosts" but does not justify the selected fix for the current issue. The decisive behavior is: Image version metadata supports traceable promotion and rollback among tested desktop baselines.
An image pipeline prevents undocumented machine changes from silently becoming the deployment baseline. This describes the separate situation "A generated image includes an outdated security agent because the manual build instructions were not updated" but does not justify the selected fix for the current issue. The decisive behavior is: Image version metadata supports traceable promotion and rollback among tested desktop baselines.
A remote desktop service needs to resolve this condition: An organization must remove an unapproved application from all new AVD sessions while preserving existing profiles. Select the best approach.
Remove the app from the managed image or App attach entitlement and roll out a tested deployment change. Application lifecycle controls determine availability, whereas user profile preservation is a separate concern. This action directly addresses the conditions in the scenario.
Configure supported Teams optimization and validate its client and host components. This would be appropriate for the different task-specific situation "Microsoft Teams voice calls inside AVD consume excessive host CPU because media redirection is inactive", because Teams optimization can redirect eligible audio and video processing to the local endpoint. It does not directly resolve the stated condition, which calls for Remove the app from the managed image or App attach entitlement and roll out a tested deployment change.
Install the required version consistently on every host eligible to receive that RemoteApp session. This would be appropriate for the different task-specific situation "An application is installed only on two of six pooled session hosts and users get intermittent launch failures", because A pool can route a session to any eligible host, so application availability must match session placement. It does not directly resolve the stated condition, which calls for Remove the app from the managed image or App attach entitlement and roll out a tested deployment change.
Validate both Teams optimization status and allowed client camera redirection policies. This would be appropriate for the different task-specific situation "Microsoft Teams calls work, but user cameras do not appear in sessions after a client policy change", because Teams real-time media and remote device redirection have separate compatibility and policy requirements. It does not directly resolve the stated condition, which calls for Remove the app from the managed image or App attach entitlement and roll out a tested deployment change.
A support ticket states: Users see a desktop resource but receive a no-resources-available message when opening it. What is the most targeted remediation?
Verify app group assignments, session host availability and pool session limits. Successful feed discovery does not guarantee any eligible healthy host can accept a new session. This action directly addresses the conditions in the scenario.
Use the Azure Local-supported AVD deployment integration and confirm platform and identity prerequisites. This would be appropriate for the different task-specific situation "An Azure Local session-host deployment is planned as if its VM inventory automatically exists in Azure Compute", because Session hosts on Azure Local use supported local infrastructure with distinct provisioning details from Azure-hosted VMs. It does not directly resolve the stated condition, which calls for Verify app group assignments, session host availability and pool session limits.
Assign the narrow Azure RBAC role and scope needed for the AVD management operation. This would be appropriate for the different task-specific situation "An automation identity can read host pools but gets AuthorizationFailed when updating configuration", because Azure Resource Manager write operations require appropriate role permissions independently of session-host OS rights. It does not directly resolve the stated condition, which calls for Verify app group assignments, session host availability and pool session limits.
Switch to breadth-first load balancing if even distribution is the desired operation. This would be appropriate for the different task-specific situation "An AVD pooled host pool is set to depth-first but administrators expect new sessions spread equally", because Breadth-first and depth-first place sessions differently across available pooled hosts. It does not directly resolve the stated condition, which calls for Verify app group assignments, session host availability and pool session limits.
The approved remediation for "A custom image must be produced repeatedly with the same installed apps and validation rules" is "Use Azure VM Image Builder with source, customization and distribution definitions". Which Azure or Windows behavior explains this?
Azure VM Image Builder can automate repeatable image construction and publishing steps. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Image portability improves when deployment-specific settings are injected when the host is created. This describes the separate situation "A captured image works in the build VNet but fails in production because its embedded script hard-codes one domain controller" but does not justify the selected fix for the current issue. The decisive behavior is: Azure VM Image Builder can automate repeatable image construction and publishing steps.
An image pipeline prevents undocumented machine changes from silently becoming the deployment baseline. This describes the separate situation "A generated image includes an outdated security agent because the manual build instructions were not updated" but does not justify the selected fix for the current issue. The decisive behavior is: Azure VM Image Builder can automate repeatable image construction and publishing steps.
Cloning a unique joined-machine identity can create domain trust and management conflicts. This describes the separate situation "A domain-joined source VM is captured with its existing computer account and deployed to dozens of hosts" but does not justify the selected fix for the current issue. The decisive behavior is: Azure VM Image Builder can automate repeatable image construction and publishing steps.
A change record states "Configure suitable QoS policies and verify prioritized interactive RDP traffic on managed network devices" after observing "A branch has competing real-time desktop audio and bulk file traffic over one constrained WAN circuit". What is the key supporting principle?
QoS traffic classification can protect latency-sensitive remote desktop flows under congestion. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Client-side internet path failures can prevent broker access without any failure in Azure session-host resources. This describes the separate situation "A help desk sees healthy host availability but only one ISP reports failed client-to-service connections" but does not justify the selected fix for the current issue. The decisive behavior is: QoS traffic classification can protect latency-sensitive remote desktop flows under congestion.
RDP Multipath feature availability depends on supported client platforms and minimum Windows App versions. This describes the separate situation "Windows App clients running obsolete builds do not display the expected RDP Multipath transport options" but does not justify the selected fix for the current issue. The decisive behavior is: QoS traffic classification can protect latency-sensitive remote desktop flows under congestion.
Private Link requires DNS resolution to direct supported service names to private endpoint addresses. This describes the separate situation "After creating an AVD private endpoint, connection feeds resolve to public destinations on managed clients" but does not justify the selected fix for the current issue. The decisive behavior is: QoS traffic classification can protect latency-sensitive remote desktop flows under congestion.
An administrator needs to correct the following: An MSI installer modifies Windows services and is incompatible with dynamic App attach packaging. Which action is most relevant?
Use a supported traditional image-based or managed application deployment method after compatibility testing. Not every Windows application can be delivered as a suitable App attach package without modification. This action directly addresses the conditions in the scenario.
Assign the appropriate user group and associate the app group with a workspace. This would be appropriate for the different task-specific situation "A RemoteApp application group exists but no employee can see the published application", because Published application visibility depends on both user entitlement and workspace feed association. It does not directly resolve the stated condition, which calls for Use a supported traditional image-based or managed application deployment method after compatibility testing.
Check Windows App client support, Teams versions and installed redirection components. This would be appropriate for the different task-specific situation "A help desk reports that the Teams optimization status shows not optimized for a portion of users", because Media optimization depends on compatibility across the endpoint client and session-host software. It does not directly resolve the stated condition, which calls for Use a supported traditional image-based or managed application deployment method after compatibility testing.
Validate both Teams optimization status and allowed client camera redirection policies. This would be appropriate for the different task-specific situation "Microsoft Teams calls work, but user cameras do not appear in sessions after a client policy change", because Teams real-time media and remote device redirection have separate compatibility and policy requirements. It does not directly resolve the stated condition, which calls for Use a supported traditional image-based or managed application deployment method after compatibility testing.
Please check your mailbox for a message from support@examlabs.com and follow the directions.