You save $69.98
AZ-140 Premium Bundle
- Premium File 372 Questions & Answers
- Last Update: Oct 25, 2026
- Training Course 79 Lectures
- Study Guide 430 Pages
You save $69.98
The team adopts "Use the Azure Local-supported AVD deployment integration and confirm platform and identity prerequisites" for this AVD requirement: "An Azure Local session-host deployment is planned as if its VM inventory automatically exists in Azure Compute". Which explanation is correct?
Session hosts on Azure Local use supported local infrastructure with distinct provisioning details from Azure-hosted VMs. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
A session host stays unavailable for new placements until its drain state is removed. This describes the separate situation "A host in drain mode remains excluded from fresh connections after patch maintenance finishes" but does not justify the selected fix for the current issue. The decisive behavior is: Session hosts on Azure Local use supported local infrastructure with distinct provisioning details from Azure-hosted VMs.
A repeatable host lifecycle reduces dependence on manual changes to individual desktops. This describes the separate situation "An operations team needs to replace unhealthy hosts using a clean image rather than repair each VM in place" but does not justify the selected fix for the current issue. The decisive behavior is: Session hosts on Azure Local use supported local infrastructure with distinct provisioning details from Azure-hosted VMs.
AVD service placement depends on completed host-pool registration, not simply Azure VM creation. This describes the separate situation "A PowerShell automation creates only session-host Azure VMs but never registers their AVD agent" but does not justify the selected fix for the current issue. The decisive behavior is: Session hosts on Azure Local use supported local infrastructure with distinct provisioning details from Azure-hosted VMs.
For the scenario "FSLogix profiles need point-in-time recovery after an accidental deletion of user data", a team selects "Configure supported Azure Files share snapshots or backup and test recovery procedures". Which technical principle best explains why it works?
Snapshots and backups provide recoverable versions that profile replication alone does not guarantee. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Identity-based authentication allows eligible Windows SMB users to access Azure Files with domain credentials and ACLs. This describes the separate situation "AD DS-joined session hosts must authenticate to Azure Files with existing domain users rather than storage account keys" but does not justify the selected fix for the current issue. The decisive behavior is: Snapshots and backups provide recoverable versions that profile replication alone does not guarantee.
Proactive storage telemetry helps prevent profile load failures caused by saturation or capacity exhaustion. This describes the separate situation "Storage monitoring reports increasing profile share capacity use but no historical growth alerts exist" but does not justify the selected fix for the current issue. The decisive behavior is: Snapshots and backups provide recoverable versions that profile replication alone does not guarantee.
A private endpoint's existence does not automatically grant connectivity and name resolution from all peered networks. This describes the separate situation "An SMB private endpoint is reachable from one VNet but inaccessible from another peered workspace VNet" but does not justify the selected fix for the current issue. The decisive behavior is: Snapshots and backups provide recoverable versions that profile replication alone does not guarantee.
The Azure Virtual Desktop team plans to "Provide an approved noninteractive outbound proxy path for Azure Virtual Desktop service endpoints" because: A web filtering proxy requires interactive authentication and prevents unattended AVD agent HTTPS communication. Which explanation supports the plan?
Session-host agents require reliable machine-level service connectivity even when no user is signed in. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Client-side internet path failures can prevent broker access without any failure in Azure session-host resources. This describes the separate situation "A help desk sees healthy host availability but only one ISP reports failed client-to-service connections" but does not justify the selected fix for the current issue. The decisive behavior is: Session-host agents require reliable machine-level service connectivity even when no user is signed in.
RDP Shortpath uses UDP where possible and falls back to TCP reverse-connect when no usable UDP path is established. This describes the separate situation "Internet-based users connect successfully but the RDP transport stays on TCP after UDP is blocked by a perimeter firewall" but does not justify the selected fix for the current issue. The decisive behavior is: Session-host agents require reliable machine-level service connectivity even when no user is signed in.
FSLogix sign-in performance depends on consistent and sufficiently low-latency access to its container storage. This describes the separate situation "Profile containers load slowly because session hosts traverse a high-latency WAN to their file shares" but does not justify the selected fix for the current issue. The decisive behavior is: Session-host agents require reliable machine-level service connectivity even when no user is signed in.
An enterprise AVD deployment has this requirement: A host pool uses an outdated gallery image despite a newer image version being available. Choose the most appropriate implementation.
Rebuild or replace session hosts through a controlled rollout referencing the desired tested version. Publishing a new gallery version does not automatically patch all existing session-host VMs. This action directly addresses the conditions in the scenario.
Create and validate compatible images and architecture-specific VM families as needed. This would be appropriate for the different task-specific situation "An organization needs to run the same image on VM sizes with different CPU architecture capabilities", because An operating system image's architecture must match supported target VM hardware. It does not directly resolve the stated condition, which calls for Rebuild or replace session hosts through a controlled rollout referencing the desired tested version.
Record OS build and installed patch level as part of every image release and compliance check. This would be appropriate for the different task-specific situation "The team builds session host images without recording which Windows cumulative updates were present", because Traceable image baselines simplify patch compliance and recovery from known OS regressions. It does not directly resolve the stated condition, which calls for Rebuild or replace session hosts through a controlled rollout referencing the desired tested version.
Complete and validate installation restarts before sealing or publishing the image. This would be appropriate for the different task-specific situation "A newly captured image includes pending Windows restart actions and fails first-boot provisioning", because Unfinished servicing operations can make a reusable image unreliable during VM customization. It does not directly resolve the stated condition, which calls for Rebuild or replace session hosts through a controlled rollout referencing the desired tested version.
The operations team reports the following symptom: An organization needs to run the same image on VM sizes with different CPU architecture capabilities. Which action should be taken first?
Create and validate compatible images and architecture-specific VM families as needed. An operating system image's architecture must match supported target VM hardware. This action directly addresses the conditions in the scenario.
Add the approved region to image version replication or deploy from a supported regional source. This would be appropriate for the different task-specific situation "An image version is replicated to one region but the expansion host pool uses another unavailable target region", because Image availability for VM creation depends on where a gallery version is distributed. It does not directly resolve the stated condition, which calls for Create and validate compatible images and architecture-specific VM families as needed.
Add supported shared-app and profile components to the image build before sealing it. This would be appropriate for the different task-specific situation "An image capture is made before required Microsoft 365 Apps and FSLogix components are installed", because Every new host inherits the software baseline present in the source image at provisioning time. It does not directly resolve the stated condition, which calls for Create and validate compatible images and architecture-specific VM families as needed.
Record OS build and installed patch level as part of every image release and compliance check. This would be appropriate for the different task-specific situation "The team builds session host images without recording which Windows cumulative updates were present", because Traceable image baselines simplify patch compliance and recovery from known OS regressions. It does not directly resolve the stated condition, which calls for Create and validate compatible images and architecture-specific VM families as needed.
While preparing session hosts, an engineer discovers: A Conditional Access policy is configured for the wrong enterprise cloud app and never challenges AVD clients. Which change best meets the requirement?
Identify and scope the policy to the correct Azure Virtual Desktop application identifiers. Conditional Access evaluation requires the targeted service sign-in to match the policy's cloud app scope. This action directly addresses the conditions in the scenario.
Verify applicable AVD login role assignments, user identity eligibility and session host sign-in settings. This would be appropriate for the different task-specific situation "New Entra joined session hosts have correct AVD registration but users are rejected at Windows interactive sign-in", because Azure Virtual Desktop resource assignment does not automatically grant every underlying Windows login right. It does not directly resolve the stated condition, which calls for Identify and scope the policy to the correct Azure Virtual Desktop application identifiers.
Plan managed domain network reachability and DNS settings for the intended session-host VNet. This would be appropriate for the different task-specific situation "An Entra Domain Services deployment is proposed without confirming its managed domain DNS and network requirements", because Managed domain authentication depends on the session hosts locating Entra Domain Services controllers. It does not directly resolve the stated condition, which calls for Identify and scope the policy to the correct Azure Virtual Desktop application identifiers.
Join session hosts to AD DS and validate network, DNS and domain controller reachability. This would be appropriate for the different task-specific situation "A pooled host pool must support legacy Kerberos applications using an existing on-premises Active Directory forest", because AD DS-joined hosts can use established Kerberos and group policy infrastructure when network connectivity is available. It does not directly resolve the stated condition, which calls for Identify and scope the policy to the correct Azure Virtual Desktop application identifiers.
For a deployment problem, "An AVD disaster plan stores every approved VM image version only in the failed primary region", administrators choose "Replicate or publish the required tested Compute Gallery image versions to a recovery region". Why does that solve it?
Secondary VM provisioning depends on availability of compatible image artifacts in that region. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Historical profile data recovery requires backup snapshots rather than profile roaming alone. This describes the separate situation "A user accidentally deletes important data from an FSLogix profile VHD stored on Azure Files and administrators have no recovery point" but does not justify the selected fix for the current issue. The decisive behavior is: Secondary VM provisioning depends on availability of compatible image artifacts in that region.
Personal desktop recovery may require coordinating the VM, user assignment and profile container. This describes the separate situation "An organization needs to restore deleted personal desktops while keeping user profile data from separate storage" but does not justify the selected fix for the current issue. The decisive behavior is: Secondary VM provisioning depends on availability of compatible image artifacts in that region.
Persistent personal VM workloads may need disk-level recovery beyond shared host image retention. This describes the separate situation "A personal desktop contains local business data and the project assumes a pooled-image backup covers it" but does not justify the selected fix for the current issue. The decisive behavior is: Secondary VM provisioning depends on availability of compatible image artifacts in that region.
A support ticket states: A pooled desktop host's maximum session limit causes users to wait although spare CPU exists on other hosts. What is the most targeted remediation?
Review host pool load balancing and session caps to distribute connections appropriately. Placement settings can prevent optimal use of available pooled compute capacity. This action directly addresses the conditions in the scenario.
Check the client-supported camera redirection settings and OS privacy permissions. This would be appropriate for the different task-specific situation "A remote meeting app cannot access the laptop's webcam even though the host has a working network", because Webcam use in remote sessions requires a supported client and permitted redirected device channel. It does not directly resolve the stated condition, which calls for Review host pool load balancing and session caps to distribute connections appropriately.
Use supported session management to disconnect or sign out the affected session after appropriate notification. This would be appropriate for the different task-specific situation "Help desk staff can see an active session that is unresponsive but do not want to delete its user profile", because Session control operations are separate from persistent profile storage and application group configuration. It does not directly resolve the stated condition, which calls for Review host pool load balancing and session caps to distribute connections appropriately.
Verify compatible client versions and AVD Teams optimization components and settings. This would be appropriate for the different task-specific situation "Screen sharing through a remote desktop performs poorly because Teams media optimization is not active", because Teams multimedia optimization can offload real-time media processing to the client when all prerequisites are met. It does not directly resolve the stated condition, which calls for Review host pool load balancing and session caps to distribute connections appropriately.
The approved remediation for "A user expects a remote session to span three monitors but only one remote screen is presented" is "Configure supported multiple-display settings in the remote client and host pool RDP properties". Which Azure or Windows behavior explains this?
Multi-monitor usage requires compatible endpoint displays and allowed RDP display behavior. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Device redirection may expose local client storage to remote applications unless explicitly restricted. This describes the separate situation "Users can see local USB storage devices from the session host despite a data-loss-prevention requirement" but does not justify the selected fix for the current issue. The decisive behavior is: Multi-monitor usage requires compatible endpoint displays and allowed RDP display behavior.
AVD workspaces are the discovery grouping for users' published desktops and RemoteApps. This describes the separate situation "The business requires users to see a curated set of resources after signing in to Windows App" but does not justify the selected fix for the current issue. The decisive behavior is: Multi-monitor usage requires compatible endpoint displays and allowed RDP display behavior.
Browser-based access offers supported remote resources without requiring a locally installed desktop client. This describes the separate situation "A temporary contractor cannot install local software but needs AVD access from a supported browser" but does not justify the selected fix for the current issue. The decisive behavior is: Multi-monitor usage requires compatible endpoint displays and allowed RDP display behavior.
An architect must address this AVD condition: OneDrive sync fills session host OS disks because large synchronized files are cached without capacity controls. What should the team implement?
Configure Files On-Demand and appropriate profile or storage capacity planning. Files On-Demand reduces unnecessary full-content downloads for eligible OneDrive files. This action directly addresses the conditions in the scenario.
Remove the app from the managed image or App attach entitlement and roll out a tested deployment change. This would be appropriate for the different task-specific situation "An organization must remove an unapproved application from all new AVD sessions while preserving existing profiles", because Application lifecycle controls determine availability, whereas user profile preservation is a separate concern. It does not directly resolve the stated condition, which calls for Configure Files On-Demand and appropriate profile or storage capacity planning.
Deploy it through managed browser extension policy targeting the allowed user group. This would be appropriate for the different task-specific situation "A browser extension must be available only for a permitted business department", because Managed browser extension policies control allowed and required extensions without manual per-user installation. It does not directly resolve the stated condition, which calls for Configure Files On-Demand and appropriate profile or storage capacity planning.
Check application group type and the published resource selected in the workspace. This would be appropriate for the different task-specific situation "A RemoteApp application group is configured but all users see the full desktop instead of the intended app", because Full desktop and RemoteApp experiences are represented by different AVD application group resources. It does not directly resolve the stated condition, which calls for Configure Files On-Demand and appropriate profile or storage capacity planning.
An administrator needs to correct the following: A production host has outdated Windows security updates but no inventory of patch compliance. Which action is most relevant?
Configure supported update reporting and remediation for the session-host operating system. Security baselines require visibility into patch status and timely correction of missing updates. This action directly addresses the conditions in the scenario.
Delegate approved management access through narrowly scoped Azure and Windows administrative roles. This would be appropriate for the different task-specific situation "An administrator needs to troubleshoot a live host's vulnerability without giving broad local admin privileges to all help desk staff", because Least-privilege role separation limits the number of principals able to modify session-host configuration. It does not directly resolve the stated condition, which calls for Configure supported update reporting and remediation for the session-host operating system.
Layer endpoint security, patching, application control and least privilege on top of network segmentation. This would be appropriate for the different task-specific situation "A team assumes a private VNet guarantees an AVD session host cannot be compromised by malicious browser content", because Private network placement does not eliminate host-level attack and malicious execution risks. It does not directly resolve the stated condition, which calls for Configure supported update reporting and remediation for the session-host operating system.
Include supported onboarding and validation in the session-host image or deployment lifecycle. This would be appropriate for the different task-specific situation "One group of image versions ships without Defender for Endpoint because the agent was added manually after provisioning", because A repeatable endpoint security baseline reduces gaps created by manual per-VM setup. It does not directly resolve the stated condition, which calls for Configure supported update reporting and remediation for the session-host operating system.
Please check your mailbox for a message from support@examlabs.com and follow the directions.