You save $69.98
AZ-140 Premium Bundle
- Premium File 372 Questions & Answers
- Last Update: Oct 25, 2026
- Training Course 79 Lectures
- Study Guide 430 Pages
You save $69.98
The team adopts "Associate the application group with the intended AVD workspace and verify user assignment" for this AVD requirement: "A newly created desktop application group is not shown in any user's remote workspace feed". Which explanation is correct?
Workspace associations determine whether assigned application group resources are exposed in the user's feed. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
AVD service placement depends on completed host-pool registration, not simply Azure VM creation. This describes the separate situation "A PowerShell automation creates only session-host Azure VMs but never registers their AVD agent" but does not justify the selected fix for the current issue. The decisive behavior is: Workspace associations determine whether assigned application group resources are exposed in the user's feed.
Azure CLI can manage AVD resource configurations through Azure Resource Manager APIs. This describes the separate situation "A Linux build worker is expected to create and configure an AVD host pool without using the Azure portal" but does not justify the selected fix for the current issue. The decisive behavior is: Workspace associations determine whether assigned application group resources are exposed in the user's feed.
Windows Server-hosted remote sessions have RDS licensing obligations distinct from Windows Enterprise multi-session rights. This describes the separate situation "Windows Server session hosts are deployed for pooled desktops but the organization has not planned RDS CALs" but does not justify the selected fix for the current issue. The decisive behavior is: Workspace associations determine whether assigned application group resources are exposed in the user's feed.
An Azure Virtual Desktop administrator observes: Internet-based users connect successfully but the RDP transport stays on TCP after UDP is blocked by a perimeter firewall. Which response directly addresses this issue?
Allow documented UDP transport paths where policy permits and validate RDP Shortpath connection details. RDP Shortpath uses UDP where possible and falls back to TCP reverse-connect when no usable UDP path is established. This action directly addresses the conditions in the scenario.
Configure the virtual network DNS servers to resolve private AD DS records and retest SRV lookups. This would be appropriate for the different task-specific situation "A session host resolves its domain name to public addresses and cannot contact internal AD controllers", because Domain-joined Windows clients use DNS SRV records to discover domain controllers and authentication services. It does not directly resolve the stated condition, which calls for Allow documented UDP transport paths where policy permits and validate RDP Shortpath connection details.
Provide an approved noninteractive outbound proxy path for Azure Virtual Desktop service endpoints. This would be appropriate for the different task-specific situation "A web filtering proxy requires interactive authentication and prevents unattended AVD agent HTTPS communication", because Session-host agents require reliable machine-level service connectivity even when no user is signed in. It does not directly resolve the stated condition, which calls for Allow documented UDP transport paths where policy permits and validate RDP Shortpath connection details.
Configure suitable QoS policies and verify prioritized interactive RDP traffic on managed network devices. This would be appropriate for the different task-specific situation "A branch has competing real-time desktop audio and bulk file traffic over one constrained WAN circuit", because QoS traffic classification can protect latency-sensitive remote desktop flows under congestion. It does not directly resolve the stated condition, which calls for Allow documented UDP transport paths where policy permits and validate RDP Shortpath connection details.
The Azure Virtual Desktop team plans to "Measure SMB transaction demand and select a suitable premium storage performance tier" because: A high-density host pool reports slow FSLogix logons when standard file shares reach their IOPS ceiling. Which explanation supports the plan?
Profile mount storms generate metadata and I/O pressure that can outgrow low-throughput file shares. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
A private endpoint's existence does not automatically grant connectivity and name resolution from all peered networks. This describes the separate situation "An SMB private endpoint is reachable from one VNet but inaccessible from another peered workspace VNet" but does not justify the selected fix for the current issue. The decisive behavior is: Profile mount storms generate metadata and I/O pressure that can outgrow low-throughput file shares.
Identity-based authentication allows eligible Windows SMB users to access Azure Files with domain credentials and ACLs. This describes the separate situation "AD DS-joined session hosts must authenticate to Azure Files with existing domain users rather than storage account keys" but does not justify the selected fix for the current issue. The decisive behavior is: Profile mount storms generate metadata and I/O pressure that can outgrow low-throughput file shares.
Private endpoints provide a private IP path to the Azure Storage file endpoint for eligible client networks. This describes the separate situation "An Azure Files SMB profile share is reachable over a public endpoint that security policy forbids" but does not justify the selected fix for the current issue. The decisive behavior is: Profile mount storms generate metadata and I/O pressure that can outgrow low-throughput file shares.
An AZ-140 reviewer recommends "Use supported session management to disconnect or sign out the affected session after appropriate notification" for the issue "Help desk staff can see an active session that is unresponsive but do not want to delete its user profile". Which underlying behavior is decisive?
Session control operations are separate from persistent profile storage and application group configuration. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Start VM on Connect powers on supported stopped hosts in response to AVD brokered connection demand. This describes the separate situation "A user requests that a powered-off personal VM start automatically when they open the remote desktop" but does not justify the selected fix for the current issue. The decisive behavior is: Session control operations are separate from persistent profile storage and application group configuration.
Client support is platform-specific, and not every remote access feature works on every device. This describes the separate situation "An administrator deploys a Remote Desktop client to an unsupported operating system and users cannot authenticate" but does not justify the selected fix for the current issue. The decisive behavior is: Session control operations are separate from persistent profile storage and application group configuration.
Clipboard redirection is an adjustable channel between local and remote sessions. This describes the separate situation "An administrator wants to disable clipboard transfer from corporate desktops to unmanaged client devices" but does not justify the selected fix for the current issue. The decisive behavior is: Session control operations are separate from persistent profile storage and application group configuration.
The operations team reports the following symptom: A web filtering proxy requires interactive authentication and prevents unattended AVD agent HTTPS communication. Which action should be taken first?
Provide an approved noninteractive outbound proxy path for Azure Virtual Desktop service endpoints. Session-host agents require reliable machine-level service connectivity even when no user is signed in. This action directly addresses the conditions in the scenario.
Inspect session connection information and AVD diagnostic connection records for transport details. This would be appropriate for the different task-specific situation "The team wants to identify whether AVD sessions used UDP Shortpath or TCP fallback during a fault", because Connection transport telemetry distinguishes the user data path independently of general VM health metrics. It does not directly resolve the stated condition, which calls for Provide an approved noninteractive outbound proxy path for Azure Virtual Desktop service endpoints.
Configure suitable QoS policies and verify prioritized interactive RDP traffic on managed network devices. This would be appropriate for the different task-specific situation "A branch has competing real-time desktop audio and bulk file traffic over one constrained WAN circuit", because QoS traffic classification can protect latency-sensitive remote desktop flows under congestion. It does not directly resolve the stated condition, which calls for Provide an approved noninteractive outbound proxy path for Azure Virtual Desktop service endpoints.
Verify supported RDP Multipath client versions and monitor transport failover events. This would be appropriate for the different task-specific situation "Users report session drops when their laptops roam between Wi-Fi and mobile connectivity", because Multipath can switch among viable backup UDP or TCP paths when an active session route degrades. It does not directly resolve the stated condition, which calls for Provide an approved noninteractive outbound proxy path for Azure Virtual Desktop service endpoints.
Consider this AVD design: Administrators install AVD agents manually on an image and accidentally bake an existing host-pool registration into it. The action is "Follow the supported AVD agent provisioning workflow and register each deployed host separately". Which statement explains this choice?
Agent registration represents an individual session host relationship and should not be cloned as a persistent identity. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Versioned image references support deterministic host replacement and rollback decisions. This describes the separate situation "A release pipeline overwrites a stable image version instead of creating a new release identity" but does not justify the selected fix for the current issue. The decisive behavior is: Agent registration represents an individual session host relationship and should not be cloned as a persistent identity.
Credentials baked into image disks are copied to every descendant VM and increase compromise exposure. This describes the separate situation "A source VM image includes a private admin credential in a startup script visible to every provisioned host" but does not justify the selected fix for the current issue. The decisive behavior is: Agent registration represents an individual session host relationship and should not be cloned as a persistent identity.
Traceable image baselines simplify patch compliance and recovery from known OS regressions. This describes the separate situation "The team builds session host images without recording which Windows cumulative updates were present" but does not justify the selected fix for the current issue. The decisive behavior is: Agent registration represents an individual session host relationship and should not be cloned as a persistent identity.
For a deployment problem, "A global desktop deployment experiences unacceptable latency because all hosts are located far from users", administrators choose "Compare target user locations and region-specific capacity before selecting session-host deployment regions". Why does that solve it?
User-to-compute proximity and available regional VM families affect user experience. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Pool separation supports divergent VM baseline, app and access-policy requirements. This describes the separate situation "An organization needs different security policy scope for high-risk developers and ordinary staff" but does not justify the selected fix for the current issue. The decisive behavior is: User-to-compute proximity and available regional VM families affect user experience.
Personal and pooled host pool types have different user-assignment and session-placement behavior. This describes the separate situation "A proposed architecture places a personal desktop and a shared pooled desktop in one host pool" but does not justify the selected fix for the current issue. The decisive behavior is: User-to-compute proximity and available regional VM families affect user experience.
Graphics workloads may require accelerated rendering resources rather than only more CPU cores. This describes the separate situation "Graphic designers run demanding 3D applications and CPU-only general-purpose VMs perform poorly" but does not justify the selected fix for the current issue. The decisive behavior is: User-to-compute proximity and available regional VM families affect user experience.
A platform team addresses "A host has a stale local Windows profile and FSLogix refuses to attach the new container for the user" with "Evaluate DeleteLocalProfileWhenVHDShouldApply with a tested migration and data-protection plan". Which technical detail justifies the response?
Existing local profiles can interfere with applying a roaming profile container to a previously used host. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
App Masking can control application visibility without reinstalling the app per user. This describes the separate situation "An application that is installed on all pooled session hosts must be hidden from nonlicensed users" but does not justify the selected fix for the current issue. The decisive behavior is: Existing local profiles can interfere with applying a roaming profile container to a previously used host.
Identity protocol hardening can interrupt profile storage access when server and client encryption capabilities diverge. This describes the separate situation "FSLogix profile mount fails after Windows Server Kerberos security hardening changes the acceptable encryption types" but does not justify the selected fix for the current issue. The decisive behavior is: Existing local profiles can interfere with applying a roaming profile container to a previously used host.
Cloud Cache supports resilience to interruptions but still needs remote providers for durable profile synchronization. This describes the separate situation "An administrator expects Cloud Cache to eliminate the need for any reachable remote storage indefinitely" but does not justify the selected fix for the current issue. The decisive behavior is: Existing local profiles can interfere with applying a roaming profile container to a previously used host.
The approved remediation for "An administrator wants to disable clipboard transfer from corporate desktops to unmanaged client devices" is "Configure applicable host pool RDP clipboard redirection properties and device management controls". Which Azure or Windows behavior explains this?
Clipboard redirection is an adjustable channel between local and remote sessions. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Session control operations are separate from persistent profile storage and application group configuration. This describes the separate situation "Help desk staff can see an active session that is unresponsive but do not want to delete its user profile" but does not justify the selected fix for the current issue. The decisive behavior is: Clipboard redirection is an adjustable channel between local and remote sessions.
Start VM on Connect is a demand-driven startup mechanism and does not necessarily power every pooled host at once. This describes the separate situation "Start VM on Connect is enabled in a pooled host pool but users expect it to boot all deallocated VMs immediately" but does not justify the selected fix for the current issue. The decisive behavior is: Clipboard redirection is an adjustable channel between local and remote sessions.
Central client deployment reduces version drift and ensures supported feature availability. This describes the separate situation "A new Windows App release must reach all managed corporate laptops consistently" but does not justify the selected fix for the current issue. The decisive behavior is: Clipboard redirection is an adjustable channel between local and remote sessions.
An architect must address this AVD condition: A customer tries to enable Trusted Launch on a VM size and image combination that does not support it. What should the team implement?
Select compatible VM families, image generation and security-profile settings. Trusted Launch support is constrained by eligible VM hardware and operating system image features. This action directly addresses the conditions in the scenario.
Use Azure Bastion or another approved protected administration path and remove unnecessary public RDP rules. This would be appropriate for the different task-specific situation "Administrative RDP access to AVD VMs currently requires exposing TCP 3389 to the public internet", because Azure Bastion supports management access without placing direct public IP and RDP exposure on every VM. It does not directly resolve the stated condition, which calls for Select compatible VM families, image generation and security-profile settings.
Apply Conditional Access and secure administrative access workflows to sensitive AVD operations. This would be appropriate for the different task-specific situation "Privileged operators connect from untrusted devices to production session hosts without strong authentication controls", because Strong identity and device conditions reduce the risk of unauthorized high-impact management activity. It does not directly resolve the stated condition, which calls for Select compatible VM families, image generation and security-profile settings.
Configure supported update reporting and remediation for the session-host operating system. This would be appropriate for the different task-specific situation "A production host has outdated Windows security updates but no inventory of patch compliance", because Security baselines require visibility into patch status and timely correction of missing updates. It does not directly resolve the stated condition, which calls for Select compatible VM families, image generation and security-profile settings.
The team adopts "Deploy and update the approved client through Microsoft Intune or another managed software channel" for this AVD requirement: "A new Windows App release must reach all managed corporate laptops consistently". Which explanation is correct?
Central client deployment reduces version drift and ensures supported feature availability. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Placement settings can prevent optimal use of available pooled compute capacity. This describes the separate situation "A pooled desktop host's maximum session limit causes users to wait although spare CPU exists on other hosts" but does not justify the selected fix for the current issue. The decisive behavior is: Central client deployment reduces version drift and ensures supported feature availability.
Session control operations are separate from persistent profile storage and application group configuration. This describes the separate situation "Help desk staff can see an active session that is unresponsive but do not want to delete its user profile" but does not justify the selected fix for the current issue. The decisive behavior is: Central client deployment reduces version drift and ensures supported feature availability.
Resource discovery reflects workspace entitlements separately from the ability to authenticate. This describes the separate situation "A user connects successfully but their published resources never appear in the client feed" but does not justify the selected fix for the current issue. The decisive behavior is: Central client deployment reduces version drift and ensures supported feature availability.
Please check your mailbox for a message from support@examlabs.com and follow the directions.