You save $69.98
AZ-140 Premium Bundle
- Premium File 372 Questions & Answers
- Last Update: Oct 25, 2026
- Training Course 79 Lectures
- Study Guide 430 Pages
You save $69.98
An administrator needs to correct the following: An image capture is made before required Microsoft 365 Apps and FSLogix components are installed. Which action is most relevant?
Add supported shared-app and profile components to the image build before sealing it. Every new host inherits the software baseline present in the source image at provisioning time. This action directly addresses the conditions in the scenario.
Follow the supported AVD agent provisioning workflow and register each deployed host separately. This would be appropriate for the different task-specific situation "Administrators install AVD agents manually on an image and accidentally bake an existing host-pool registration into it", because Agent registration represents an individual session host relationship and should not be cloned as a persistent identity. It does not directly resolve the stated condition, which calls for Add supported shared-app and profile components to the image build before sealing it.
Pin deployment templates to the approved gallery image version rather than an implicit latest reference. This would be appropriate for the different task-specific situation "A production host pool must be replaced without accidentally rolling forward to an untested latest image", because Explicit version selection prevents unexpected upstream image changes from reaching production. It does not directly resolve the stated condition, which calls for Add supported shared-app and profile components to the image build before sealing it.
Publish a new immutable image version and pin production deployments to the approved version. This would be appropriate for the different task-specific situation "A release pipeline overwrites a stable image version instead of creating a new release identity", because Versioned image references support deterministic host replacement and rollback decisions. It does not directly resolve the stated condition, which calls for Add supported shared-app and profile components to the image build before sealing it.
An Azure Virtual Desktop administrator observes: A pooled host receives far more simultaneous users than planned because its session cap is too high. Which response directly addresses this issue?
Set the host pool maximum session limit based on validated user-density testing. Pooled host placement respects configured session limits and load-balancing behavior. This action directly addresses the conditions in the scenario.
Include the supported agent and registration process after VM provisioning. This would be appropriate for the different task-specific situation "A PowerShell automation creates only session-host Azure VMs but never registers their AVD agent", because AVD service placement depends on completed host-pool registration, not simply Azure VM creation. It does not directly resolve the stated condition, which calls for Set the host pool maximum session limit based on validated user-density testing.
Associate the application group with the intended AVD workspace and verify user assignment. This would be appropriate for the different task-specific situation "A newly created desktop application group is not shown in any user's remote workspace feed", because Workspace associations determine whether assigned application group resources are exposed in the user's feed. It does not directly resolve the stated condition, which calls for Set the host pool maximum session limit based on validated user-density testing.
Generate a replacement registration token and rerun the authorized registration step. This would be appropriate for the different task-specific situation "A host-pool registration token expired before a batch of session hosts completed deployment", because Expired registration tokens cannot be used to register additional session hosts. It does not directly resolve the stated condition, which calls for Set the host pool maximum session limit based on validated user-density testing.
The Azure Virtual Desktop team plans to "Assign the App attach application to the intended user security group through an appropriate application group" because: A new packaged app must be available to only one department in a large AVD host pool. Which explanation supports the plan?
App attach user access is controlled through AVD app publication and group entitlement. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
RemoteApp launching depends on finding the requested application at the expected host location. This describes the separate situation "A custom application path is entered incorrectly and RemoteApp launches fail with a missing executable" but does not justify the selected fix for the current issue. The decisive behavior is: App attach user access is controlled through AVD app publication and group entitlement.
Staging browser updates reduces fleetwide disruption from extension or application incompatibilities. This describes the separate situation "A new browser release breaks a required internal extension on every host pool after an automatic update" but does not justify the selected fix for the current issue. The decisive behavior is: App attach user access is controlled through AVD app publication and group entitlement.
Teams real-time media and remote device redirection have separate compatibility and policy requirements. This describes the separate situation "Microsoft Teams calls work, but user cameras do not appear in sessions after a client policy change" but does not justify the selected fix for the current issue. The decisive behavior is: App attach user access is controlled through AVD app publication and group entitlement.
An enterprise AVD deployment has this requirement: One department wants access to published apps but not the underlying desktop app group. Choose the most appropriate implementation.
Assign only the required RemoteApp group and review any separately published desktop entitlement. App group assignment is scoped to specific published AVD resource collections. This action directly addresses the conditions in the scenario.
Validate client-supported sign-in and MFA combinations in a pilot before broad Conditional Access enforcement. This would be appropriate for the different task-specific situation "A company must enforce an MFA method that works with its Windows App client on supported operating systems", because Authentication method compatibility can vary among AVD clients and session-host identity configurations. It does not directly resolve the stated condition, which calls for Assign only the required RemoteApp group and review any separately published desktop entitlement.
Select a supported Azure Files identity approach such as Microsoft Entra Kerberos and validate all prerequisites. This would be appropriate for the different task-specific situation "A cloud-only Entra user needs to reach a domain-dependent SMB profile share with unsupported identity configuration", because FSLogix profile storage authentication must be compatible with the host's chosen join and user identity model. It does not directly resolve the stated condition, which calls for Assign only the required RemoteApp group and review any separately published desktop entitlement.
Join session hosts to AD DS and validate network, DNS and domain controller reachability. This would be appropriate for the different task-specific situation "A pooled host pool must support legacy Kerberos applications using an existing on-premises Active Directory forest", because AD DS-joined hosts can use established Kerberos and group policy infrastructure when network connectivity is available. It does not directly resolve the stated condition, which calls for Assign only the required RemoteApp group and review any separately published desktop entitlement.
A support engineer corrects "One host experiences memory exhaustion but Azure Monitor only shows platform CPU utilization" by choosing "Use Azure Monitor Agent and an appropriate data collection rule for guest memory counters". What mechanism makes that appropriate?
Guest OS metrics require supported agent-based collection beyond default platform metrics. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
A slow sign-in can stem from profile storage or user logon stages rather than the AVD broker. This describes the separate situation "The AVD service desk sees rising sign-in time but has no profile mount or storage latency diagnostics" but does not justify the selected fix for the current issue. The decisive behavior is: Guest OS metrics require supported agent-based collection beyond default platform metrics.
Aggregated monitoring can reduce alert fatigue without losing evidence of a shared incident. This describes the separate situation "The operations team receives hundreds of identical AVD sign-in alerts during one regional network fault" but does not justify the selected fix for the current issue. The decisive behavior is: Guest OS metrics require supported agent-based collection beyond default platform metrics.
AVD scaling plans can deallocate surplus session hosts according to defined operating periods. This describes the separate situation "A pooled host pool runs all its VMs overnight even though no users connect" but does not justify the selected fix for the current issue. The decisive behavior is: Guest OS metrics require supported agent-based collection beyond default platform metrics.
While preparing session hosts, an engineer discovers: A release pipeline overwrites a stable image version instead of creating a new release identity. Which change best meets the requirement?
Publish a new immutable image version and pin production deployments to the approved version. Versioned image references support deterministic host replacement and rollback decisions. This action directly addresses the conditions in the scenario.
Build a pilot host group, validate business apps and roll out new image versions in controlled stages. This would be appropriate for the different task-specific situation "A host pool rollout should test a new image without moving every user at once", because Ring-based image rollout limits the blast radius of unexpected driver or application incompatibilities. It does not directly resolve the stated condition, which calls for Publish a new immutable image version and pin production deployments to the approved version.
Follow the supported AVD agent provisioning workflow and register each deployed host separately. This would be appropriate for the different task-specific situation "Administrators install AVD agents manually on an image and accidentally bake an existing host-pool registration into it", because Agent registration represents an individual session host relationship and should not be cloned as a persistent identity. It does not directly resolve the stated condition, which calls for Publish a new immutable image version and pin production deployments to the approved version.
Remove per-user artifacts and validate image generalization before publishing. This would be appropriate for the different task-specific situation "An image build installs a user-specific browser profile under an administrator account that later appears on all hosts", because A reusable desktop image should not include personalized data from the build operator. It does not directly resolve the stated condition, which calls for Publish a new immutable image version and pin production deployments to the approved version.
A remote desktop service needs to resolve this condition: Outlook clients keep rebuilding their local mailbox caches on every pooled session host. Select the best approach.
Verify the required FSLogix Profile or ODFC configuration and supported Outlook cache paths. Roaming profile or Office data containers preserve supported application cache content between hosts. This action directly addresses the conditions in the scenario.
Use narrow documented exclusions and preserve persistent user folders and application settings. This would be appropriate for the different task-specific situation "An admin excludes the entire user profile from FSLogix roaming to reduce storage cost", because Overly broad exclusions undermine the purpose of a roaming profile container. It does not directly resolve the stated condition, which calls for Verify the required FSLogix Profile or ODFC configuration and supported Outlook cache paths.
Review session state and supported FSLogix concurrent-access behavior before manually changing VHD locks. This would be appropriate for the different task-specific situation "A help desk sees one user's profile VHD locked by an older disconnected session during a second login", because A container normally requires coordinated attachment and conflicting sessions can prevent consistent profile writes. It does not directly resolve the stated condition, which calls for Verify the required FSLogix Profile or ODFC configuration and supported Outlook cache paths.
Repair the profile share's identity-based authentication, share roles and NTFS ACLs. This would be appropriate for the different task-specific situation "A user's FSLogix VHD exists but sign-in falls back to a local temporary profile due to SMB access denial", because FSLogix cannot attach a profile disk when the user or host cannot access the backing container. It does not directly resolve the stated condition, which calls for Verify the required FSLogix Profile or ODFC configuration and supported Outlook cache paths.
A support ticket states: A service desk assigns the Virtual Machine Administrator Login role to all desktop users to fix one access issue. What is the most targeted remediation?
Use the minimum supported Windows session-login role for eligible desktop users and restrict admin login roles. Administrative VM login rights exceed the privileges needed for ordinary user desktops. This action directly addresses the conditions in the scenario.
Select a supported Azure Files identity approach such as Microsoft Entra Kerberos and validate all prerequisites. This would be appropriate for the different task-specific situation "A cloud-only Entra user needs to reach a domain-dependent SMB profile share with unsupported identity configuration", because FSLogix profile storage authentication must be compatible with the host's chosen join and user identity model. It does not directly resolve the stated condition, which calls for Use the minimum supported Windows session-login role for eligible desktop users and restrict admin login roles.
Validate hybrid identity synchronization and the correct Windows account source for that host. This would be appropriate for the different task-specific situation "A user is present in Entra but the AD DS-joined host says the domain account cannot be found", because Cloud directory presence alone does not create a corresponding identity in an unrelated local AD DS forest. It does not directly resolve the stated condition, which calls for Use the minimum supported Windows session-login role for eligible desktop users and restrict admin login roles.
Check Azure RBAC permission for the requested management action separately from application group assignment. This would be appropriate for the different task-specific situation "A desktop user can see an assigned desktop but a separate VM management operation still fails authorization", because Resource management access and user entitlement to a published desktop are different authorization layers. It does not directly resolve the stated condition, which calls for Use the minimum supported Windows session-login role for eligible desktop users and restrict admin login roles.
The approved remediation for "A production host must stop accepting new pooled connections while existing user sessions remain active" is "Enable drain mode on that session host before maintenance". Which Azure or Windows behavior explains this?
Drain mode prevents new user sessions from landing on a host while allowing existing sessions to finish. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
AVD service placement depends on completed host-pool registration, not simply Azure VM creation. This describes the separate situation "A PowerShell automation creates only session-host Azure VMs but never registers their AVD agent" but does not justify the selected fix for the current issue. The decisive behavior is: Drain mode prevents new user sessions from landing on a host while allowing existing sessions to finish.
AVD application group assignments control which users are entitled to publishable desktop resources. This describes the separate situation "A call center wants a desktop resource visible only to an authorized employee group" but does not justify the selected fix for the current issue. The decisive behavior is: Drain mode prevents new user sessions from landing on a host while allowing existing sessions to finish.
Session hosts on Azure Local use supported local infrastructure with distinct provisioning details from Azure-hosted VMs. This describes the separate situation "An Azure Local session-host deployment is planned as if its VM inventory automatically exists in Azure Compute" but does not justify the selected fix for the current issue. The decisive behavior is: Drain mode prevents new user sessions from landing on a host while allowing existing sessions to finish.
An architect must address this AVD condition: AVD Insights shows no session host performance counters after all VMs were replaced. What should the team implement?
Ensure replacement hosts have Azure Monitor Agent and the correct linked data collection rules. Replacing compute does not automatically recreate every guest telemetry configuration on a new VM. This action directly addresses the conditions in the scenario.
Review applicable AVD session and application group diagnostic records with user access controls. This would be appropriate for the different task-specific situation "Operations needs to see which published RemoteApps users actually launched during a support incident", because AVD monitoring can correlate application assignment with supported connection and session activity. It does not directly resolve the stated condition, which calls for Ensure replacement hosts have Azure Monitor Agent and the correct linked data collection rules.
Query historical connection events and host session associations in Log Analytics. This would be appropriate for the different task-specific situation "An admin wants to know which session hosts actually accepted connections before a maintenance incident", because Historical diagnostics can reconstruct the involved hosts beyond the currently active session list. It does not directly resolve the stated condition, which calls for Ensure replacement hosts have Azure Monitor Agent and the correct linked data collection rules.
Validate the configured autoscale mode, host limits and Azure Compute quota constraints. This would be appropriate for the different task-specific situation "A help desk expects a scaling plan to instantly create an unlimited number of session host VMs", because Scaling automation is limited by plan design and available compute resources. It does not directly resolve the stated condition, which calls for Ensure replacement hosts have Azure Monitor Agent and the correct linked data collection rules.
An administrator needs to correct the following: A purchasing plan sizes desktop infrastructure by total employees but ignores concurrent usage patterns. Which action is most relevant?
Estimate peak concurrent sessions and role-specific CPU, memory and storage needs. AVD compute sizing is driven by actual concurrent workload demand, not merely assigned headcount. This action directly addresses the conditions in the scenario.
Set a realistic maximum session limit based on observed user-density testing. This would be appropriate for the different task-specific situation "Pooled session hosts become unstable after more simultaneous logons than memory capacity supports", because The maximum session limit constrains placement but must be derived from workload and VM memory performance. It does not directly resolve the stated condition, which calls for Estimate peak concurrent sessions and role-specific CPU, memory and storage needs.
Test workload isolation, sizing and optimized application delivery before changing the entire assignment model. This would be appropriate for the different task-specific situation "A planning team proposes replacing all pooled desktops with personal VMs after noticing one application's high CPU use", because A single resource-intensive app does not by itself prove every user needs dedicated desktop infrastructure. It does not directly resolve the stated condition, which calls for Estimate peak concurrent sessions and role-specific CPU, memory and storage needs.
Design an AVD scaling plan with minimum capacity, schedules and Start VM on Connect as appropriate. This would be appropriate for the different task-specific situation "Administrators want to minimize cold host start costs during non-business hours", because Autoscale can power down surplus hosts, but sufficient capacity and start-up behavior must still support user sign-ins. It does not directly resolve the stated condition, which calls for Estimate peak concurrent sessions and role-specific CPU, memory and storage needs.
Please check your mailbox for a message from support@examlabs.com and follow the directions.