You save $69.98
An administrator needs to correct the following: An administrator applies a cumulative update to every session host simultaneously and all users are disconnected. Which action is most relevant?
Stage updates through maintenance rings and preserve enough healthy capacity for active sessions. Rolling updates retain service availability when a subset of hosts is undergoing maintenance. This action directly addresses the conditions in the scenario.
Write and rehearse a complete failover runbook covering host pools, clients, DNS and user access. This would be appropriate for the different task-specific situation "The disaster recovery documentation contains a list of backup services but no tested routing or client reconnect process", because End-to-end AVD continuity depends on restoring usable sessions, not merely confirming backups exist. It does not directly resolve the stated condition, which calls for Stage updates through maintenance rings and preserve enough healthy capacity for active sessions.
Drain hosts, notify users and schedule a controlled sign-out and resource decommissioning sequence. This would be appropriate for the different task-specific situation "A host pool must be retired but some users still have active sessions and unsaved documents", because Decommissioning while users are active can lose unsaved work or interrupt profile disk detach. It does not directly resolve the stated condition, which calls for Stage updates through maintenance rings and preserve enough healthy capacity for active sessions.
Run a disaster recovery rehearsal and verify actual end-to-end RTO and RPO. This would be appropriate for the different task-specific situation "A recovery strategy sets an RTO of one hour but has never measured image deployment and profile restore times", because Recovery plans should be tested against achievable service restoration and data loss objectives. It does not directly resolve the stated condition, which calls for Stage updates through maintenance rings and preserve enough healthy capacity for active sessions.
For the scenario "A purchasing plan sizes desktop infrastructure by total employees but ignores concurrent usage patterns", a team selects "Estimate peak concurrent sessions and role-specific CPU, memory and storage needs". Which technical principle best explains why it works?
AVD compute sizing is driven by actual concurrent workload demand, not merely assigned headcount. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
A single resource-intensive app does not by itself prove every user needs dedicated desktop infrastructure. This describes the separate situation "A planning team proposes replacing all pooled desktops with personal VMs after noticing one application's high CPU use" but does not justify the selected fix for the current issue. The decisive behavior is: AVD compute sizing is driven by actual concurrent workload demand, not merely assigned headcount.
Personal and pooled host pool types have different user-assignment and session-placement behavior. This describes the separate situation "A proposed architecture places a personal desktop and a shared pooled desktop in one host pool" but does not justify the selected fix for the current issue. The decisive behavior is: AVD compute sizing is driven by actual concurrent workload demand, not merely assigned headcount.
Graphics workloads may require accelerated rendering resources rather than only more CPU cores. This describes the separate situation "Graphic designers run demanding 3D applications and CPU-only general-purpose VMs perform poorly" but does not justify the selected fix for the current issue. The decisive behavior is: AVD compute sizing is driven by actual concurrent workload demand, not merely assigned headcount.
The Azure Virtual Desktop team plans to "Restrict Azure Files SMB share roles and NTFS permissions to authorized profile owners" because: A private profile storage endpoint is deployed but a broad share-level permission still grants write access to all users. Which explanation supports the plan?
Private transport protects the network path but does not replace file-level access control. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Antimalware protection is part of a defense-in-depth baseline for AVD Windows session hosts. This describes the separate situation "Windows Defender Antivirus real-time protection has been disabled on all new pooled session hosts" but does not justify the selected fix for the current issue. The decisive behavior is: Private transport protects the network path but does not replace file-level access control.
Trusted Launch support is constrained by eligible VM hardware and operating system image features. This describes the separate situation "A customer tries to enable Trusted Launch on a VM size and image combination that does not support it" but does not justify the selected fix for the current issue. The decisive behavior is: Private transport protects the network path but does not replace file-level access control.
Strong identity and device conditions reduce the risk of unauthorized high-impact management activity. This describes the separate situation "Privileged operators connect from untrusted devices to production session hosts without strong authentication controls" but does not justify the selected fix for the current issue. The decisive behavior is: Private transport protects the network path but does not replace file-level access control.
An enterprise AVD deployment has this requirement: An image version is replicated to one region but the expansion host pool uses another unavailable target region. Choose the most appropriate implementation.
Add the approved region to image version replication or deploy from a supported regional source. Image availability for VM creation depends on where a gallery version is distributed. This action directly addresses the conditions in the scenario.
Adopt explicit Compute Gallery image definitions and semantic versions for release tracking. This would be appropriate for the different task-specific situation "An image management process stores all custom versions under an unversioned single file name", because Image version metadata supports traceable promotion and rollback among tested desktop baselines. It does not directly resolve the stated condition, which calls for Add the approved region to image version replication or deploy from a supported regional source.
Install and validate supported GPU drivers for the target VM family within the image release. This would be appropriate for the different task-specific situation "A new graphics-intensive image boots successfully but 3D applications fall back to software rendering", because Accelerated desktop applications require matching GPU virtual hardware and supported device drivers. It does not directly resolve the stated condition, which calls for Add the approved region to image version replication or deploy from a supported regional source.
Remove embedded secrets and retrieve required credentials through supported protected deployment mechanisms. This would be appropriate for the different task-specific situation "A source VM image includes a private admin credential in a startup script visible to every provisioned host", because Credentials baked into image disks are copied to every descendant VM and increase compromise exposure. It does not directly resolve the stated condition, which calls for Add the approved region to image version replication or deploy from a supported regional source.
The operations team reports the following symptom: Confidential workloads need stronger isolation of in-use session-host memory from underlying host access. Which action should be taken first?
Evaluate supported Azure confidential VM families and the applicable AVD workload compatibility. Confidential computing features protect eligible data in use with hardware-backed isolation mechanisms. This action directly addresses the conditions in the scenario.
Remove unnecessary local admin membership and provide a managed application deployment process. This would be appropriate for the different task-specific situation "Users have local administrator rights on pooled session hosts solely to install a browser extension", because Local administrator privileges on shared hosts increase potential cross-user and system compromise. It does not directly resolve the stated condition, which calls for Evaluate supported Azure confidential VM families and the applicable AVD workload compatibility.
Use Defender for Cloud, Azure Policy and endpoint management compliance reports at the intended scope. This would be appropriate for the different task-specific situation "An audit requires evidence that desktop hosts conform to centrally mandated security baseline settings", because Combining posture and device telemetry makes configuration drift visible to security reviewers. It does not directly resolve the stated condition, which calls for Evaluate supported Azure confidential VM families and the applicable AVD workload compatibility.
Configure Controlled Folder Access with suitable protected folder and application allow rules. This would be appropriate for the different task-specific situation "Ransomware routinely tries to modify protected user document folders within remote desktops", because Controlled Folder Access restricts untrusted processes from modifying protected data locations. It does not directly resolve the stated condition, which calls for Evaluate supported Azure confidential VM families and the applicable AVD workload compatibility.
While preparing session hosts, an engineer discovers: A host pool must be retired but some users still have active sessions and unsaved documents. Which change best meets the requirement?
Drain hosts, notify users and schedule a controlled sign-out and resource decommissioning sequence. Decommissioning while users are active can lose unsaved work or interrupt profile disk detach. This action directly addresses the conditions in the scenario.
Stage updates through maintenance rings and preserve enough healthy capacity for active sessions. This would be appropriate for the different task-specific situation "An administrator applies a cumulative update to every session host simultaneously and all users are disconnected", because Rolling updates retain service availability when a subset of hosts is undergoing maintenance. It does not directly resolve the stated condition, which calls for Drain hosts, notify users and schedule a controlled sign-out and resource decommissioning sequence.
Restore required VM disks or backups and reconnect validated profile storage before reassignment. This would be appropriate for the different task-specific situation "An organization needs to restore deleted personal desktops while keeping user profile data from separate storage", because Personal desktop recovery may require coordinating the VM, user assignment and profile container. It does not directly resolve the stated condition, which calls for Drain hosts, notify users and schedule a controlled sign-out and resource decommissioning sequence.
Prepare alternate workspace or host pool access and validated user entitlement during regional failover. This would be appropriate for the different task-specific situation "A failed primary Azure region requires users to reach precreated secondary host pools", because AVD recovery requires both healthy secondary session hosts and discoverable authorized desktop resources. It does not directly resolve the stated condition, which calls for Drain hosts, notify users and schedule a controlled sign-out and resource decommissioning sequence.
A remote desktop service needs to resolve this condition: Administrative RDP access to AVD VMs currently requires exposing TCP 3389 to the public internet. Select the best approach.
Use Azure Bastion or another approved protected administration path and remove unnecessary public RDP rules. Azure Bastion supports management access without placing direct public IP and RDP exposure on every VM. This action directly addresses the conditions in the scenario.
Plan and pilot App Control for Business allow policies for the required OS and application set. This would be appropriate for the different task-specific situation "An engineering group wants only approved executable programs to launch in a high-security pooled desktop", because Application control policies can restrict execution of software not approved by the organization. It does not directly resolve the stated condition, which calls for Use Azure Bastion or another approved protected administration path and remove unnecessary public RDP rules.
Restore Defender update connectivity and monitor antivirus definition freshness. This would be appropriate for the different task-specific situation "One AVD VM image has outdated malware signatures because it has not contacted security update services", because A running security sensor without current signatures can miss newly recognized threats. It does not directly resolve the stated condition, which calls for Use Azure Bastion or another approved protected administration path and remove unnecessary public RDP rules.
Apply Conditional Access and secure administrative access workflows to sensitive AVD operations. This would be appropriate for the different task-specific situation "Privileged operators connect from untrusted devices to production session hosts without strong authentication controls", because Strong identity and device conditions reduce the risk of unauthorized high-impact management activity. It does not directly resolve the stated condition, which calls for Use Azure Bastion or another approved protected administration path and remove unnecessary public RDP rules.
A support ticket states: A session host VM is rebuilt with the same name but its old AVD registration object remains unhealthy. What is the most targeted remediation?
Remove or repair stale session-host registration records and register the new agent safely. Host-pool inventory and Azure VM resources may need reconciliation after destructive replacement. This action directly addresses the conditions in the scenario.
Associate the application group with the intended AVD workspace and verify user assignment. This would be appropriate for the different task-specific situation "A newly created desktop application group is not shown in any user's remote workspace feed", because Workspace associations determine whether assigned application group resources are exposed in the user's feed. It does not directly resolve the stated condition, which calls for Remove or repair stale session-host registration records and register the new agent safely.
Choose the supported desktop or RemoteApp group types and publish through the intended workspace. This would be appropriate for the different task-specific situation "A host-pool administrator tries to place desktop and RemoteApp entitlements in incompatible application group arrangements", because Desktop and RemoteApp application groups represent different resource presentation and assignment models. It does not directly resolve the stated condition, which calls for Remove or repair stale session-host registration records and register the new agent safely.
Disable drain mode after verifying the host is healthy and ready for user traffic. This would be appropriate for the different task-specific situation "A host in drain mode remains excluded from fresh connections after patch maintenance finishes", because A session host stays unavailable for new placements until its drain state is removed. It does not directly resolve the stated condition, which calls for Remove or repair stale session-host registration records and register the new agent safely.
During an Azure Virtual Desktop migration, this problem appears: A host-pool administrator tries to place desktop and RemoteApp entitlements in incompatible application group arrangements. Which solution fits?
Choose the supported desktop or RemoteApp group types and publish through the intended workspace. Desktop and RemoteApp application groups represent different resource presentation and assignment models. This action directly addresses the conditions in the scenario.
Set the host pool maximum session limit based on validated user-density testing. This would be appropriate for the different task-specific situation "A pooled host receives far more simultaneous users than planned because its session cap is too high", because Pooled host placement respects configured session limits and load-balancing behavior. It does not directly resolve the stated condition, which calls for Choose the supported desktop or RemoteApp group types and publish through the intended workspace.
Verify the personal host pool's assignment type and preserve or update its user-to-host mapping. This would be appropriate for the different task-specific situation "A personal desktop owner signs in but the pool automatically assigns the user a different VM after a rebuild", because Personal desktop access depends on a consistent valid assignment to a particular session host. It does not directly resolve the stated condition, which calls for Choose the supported desktop or RemoteApp group types and publish through the intended workspace.
Include the supported agent and registration process after VM provisioning. This would be appropriate for the different task-specific situation "A PowerShell automation creates only session-host Azure VMs but never registers their AVD agent", because AVD service placement depends on completed host-pool registration, not simply Azure VM creation. It does not directly resolve the stated condition, which calls for Choose the supported desktop or RemoteApp group types and publish through the intended workspace.
An architect must address this AVD condition: A capacity report shows brief 200-percent login spikes before employees start their shifts. What should the team implement?
Size host pool capacity and profile storage for sign-in bursts rather than only daily average load. Logon storms create short-lived authentication, disk and CPU spikes that sustained averages can hide. This action directly addresses the conditions in the scenario.
Validate each proposed user's AVD access licensing and supported entitlement before rollout. This would be appropriate for the different task-specific situation "Contractors need AVD desktops but their identity and Microsoft license eligibility are unclear", because Remote access rights depend on the chosen AVD operating system, user population and licensing model. It does not directly resolve the stated condition, which calls for Size host pool capacity and profile storage for sign-in bursts rather than only daily average load.
Plan workspace and application group assignments so users discover intended resources. This would be appropriate for the different task-specific situation "Users need one published workspace containing separate desktop and application resources", because Workspaces aggregate the AVD application groups presented to authorized users. It does not directly resolve the stated condition, which calls for Size host pool capacity and profile storage for sign-in bursts rather than only daily average load.
Test workload isolation, sizing and optimized application delivery before changing the entire assignment model. This would be appropriate for the different task-specific situation "A planning team proposes replacing all pooled desktops with personal VMs after noticing one application's high CPU use", because A single resource-intensive app does not by itself prove every user needs dedicated desktop infrastructure. It does not directly resolve the stated condition, which calls for Size host pool capacity and profile storage for sign-in bursts rather than only daily average load.
The team adopts "Review applicable AVD session and application group diagnostic records with user access controls" for this AVD requirement: "Operations needs to see which published RemoteApps users actually launched during a support incident". Which explanation is correct?
AVD monitoring can correlate application assignment with supported connection and session activity. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Autoscale decisions must account for existing user session state to avoid disruption. This describes the separate situation "A scaling plan powers off hosts too aggressively while employees have disconnected but resumable sessions" but does not justify the selected fix for the current issue. The decisive behavior is: AVD monitoring can correlate application assignment with supported connection and session activity.
Misaligned host placement can cause hotspots despite sufficient aggregate pool capacity. This describes the separate situation "Help desk staff see high CPU on one session host while others remain lightly loaded" but does not justify the selected fix for the current issue. The decisive behavior is: AVD monitoring can correlate application assignment with supported connection and session activity.
General VM metrics cannot replace the service-specific events that explain remote resource access failures. This describes the separate situation "A team uses a generic Azure VM dashboard and assumes it covers all AVD application group connection failures" but does not justify the selected fix for the current issue. The decisive behavior is: AVD monitoring can correlate application assignment with supported connection and session activity.
Please check your mailbox for a message from support@examlabs.com and follow the directions.
