You save $69.98
AZ-140 Premium Bundle
- Premium File 372 Questions & Answers
- Last Update: Oct 25, 2026
- Training Course 79 Lectures
- Study Guide 430 Pages
You save $69.98
An administrator needs to correct the following: Remote desktop users complain that every connection exposes all their local printers to a sensitive session. Which action is most relevant?
Limit printer redirection or publish only approved printers in the remote environment. Printer redirection can be restricted to reduce unnecessary device exposure and confusion. This action directly addresses the conditions in the scenario.
Examine host pool RDP properties alongside session-host group policies and endpoint restrictions. This would be appropriate for the different task-specific situation "A new client deployment redirects local drives even though host pool properties are intended to block them", because Redirection behavior can depend on multiple policy layers and client capability. It does not directly resolve the stated condition, which calls for Limit printer redirection or publish only approved printers in the remote environment.
Use supported session management to disconnect or sign out the affected session after appropriate notification. This would be appropriate for the different task-specific situation "Help desk staff can see an active session that is unresponsive but do not want to delete its user profile", because Session control operations are separate from persistent profile storage and application group configuration. It does not directly resolve the stated condition, which calls for Limit printer redirection or publish only approved printers in the remote environment.
Deploy a supported Windows App client and validate subscription feed discovery. This would be appropriate for the different task-specific situation "Employees on Windows devices are migrating from a retired Remote Desktop app to current supported access", because Current Azure Virtual Desktop clients determine which remote experiences and transport features users can access. It does not directly resolve the stated condition, which calls for Limit printer redirection or publish only approved printers in the remote environment.
For the scenario "A critical Windows update is required but administrators have no compliance report for AVD VMs", a team selects "Use compatible Azure Update Manager or endpoint management reporting to assess and deploy patches". Which technical principle best explains why it works?
Update compliance monitoring helps verify that required OS fixes reach the intended session-host fleet. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Personal desktop recovery may require coordinating the VM, user assignment and profile container. This describes the separate situation "An organization needs to restore deleted personal desktops while keeping user profile data from separate storage" but does not justify the selected fix for the current issue. The decisive behavior is: Update compliance monitoring helps verify that required OS fixes reach the intended session-host fleet.
Session hosts are replaceable, but user profiles need independent protection and availability. This describes the separate situation "An organization relies on locally stored user profiles when replacing pooled session hosts during disaster recovery" but does not justify the selected fix for the current issue. The decisive behavior is: Update compliance monitoring helps verify that required OS fixes reach the intended session-host fleet.
Historical profile data recovery requires backup snapshots rather than profile roaming alone. This describes the separate situation "A user accidentally deletes important data from an FSLogix profile VHD stored on Azure Files and administrators have no recovery point" but does not justify the selected fix for the current issue. The decisive behavior is: Update compliance monitoring helps verify that required OS fixes reach the intended session-host fleet.
The Azure Virtual Desktop team plans to "Rebuild and release a tested updated image instead of relying only on per-host drift" because: Security updates are applied manually to each pooled session host but the golden image remains unpatched. Which explanation supports the plan?
A patched image provides a consistent starting security posture for future replacement hosts. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Cloning a unique joined-machine identity can create domain trust and management conflicts. This describes the separate situation "A domain-joined source VM is captured with its existing computer account and deployed to dozens of hosts" but does not justify the selected fix for the current issue. The decisive behavior is: A patched image provides a consistent starting security posture for future replacement hosts.
Image version metadata supports traceable promotion and rollback among tested desktop baselines. This describes the separate situation "An image management process stores all custom versions under an unversioned single file name" but does not justify the selected fix for the current issue. The decisive behavior is: A patched image provides a consistent starting security posture for future replacement hosts.
Traceable image baselines simplify patch compliance and recovery from known OS regressions. This describes the separate situation "The team builds session host images without recording which Windows cumulative updates were present" but does not justify the selected fix for the current issue. The decisive behavior is: A patched image provides a consistent starting security posture for future replacement hosts.
An enterprise AVD deployment has this requirement: An administrator grants everyone Full Control on a profile share to fix a single user logon issue. Choose the most appropriate implementation.
Apply least-privilege share and NTFS permissions with user-specific container ownership. Broad write access to profile containers can expose or corrupt other users' data. This action directly addresses the conditions in the scenario.
Validate peering, route tables, private DNS resolution and storage access rules across both networks. This would be appropriate for the different task-specific situation "An SMB private endpoint is reachable from one VNet but inaccessible from another peered workspace VNet", because A private endpoint's existence does not automatically grant connectivity and name resolution from all peered networks. It does not directly resolve the stated condition, which calls for Apply least-privilege share and NTFS permissions with user-specific container ownership.
Measure SMB transaction demand and select a suitable premium storage performance tier. This would be appropriate for the different task-specific situation "A high-density host pool reports slow FSLogix logons when standard file shares reach their IOPS ceiling", because Profile mount storms generate metadata and I/O pressure that can outgrow low-throughput file shares. It does not directly resolve the stated condition, which calls for Apply least-privilege share and NTFS permissions with user-specific container ownership.
Use an approved private network route or supported SMB access architecture rather than assuming direct public 445 access. This would be appropriate for the different task-specific situation "A branch client cannot mount an SMB profile share because its ISP blocks outbound TCP 445", because SMB share access requires its transport to reach the file service over an allowed network path. It does not directly resolve the stated condition, which calls for Apply least-privilege share and NTFS permissions with user-specific container ownership.
A support engineer corrects "Office employees cannot print to a managed company printer from remote AVD sessions" by choosing "Configure Universal Print or another supported remote printing workflow with user permissions". What mechanism makes that appropriate?
Printer availability depends on the configured print service and the session's printer redirection policy. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Session control operations are separate from persistent profile storage and application group configuration. This describes the separate situation "Help desk staff can see an active session that is unresponsive but do not want to delete its user profile" but does not justify the selected fix for the current issue. The decisive behavior is: Printer availability depends on the configured print service and the session's printer redirection policy.
Clipboard sharing requires a permitted remote device channel, not only Windows clipboard functionality on the host. This describes the separate situation "An application cannot paste text from a local client even though its clipboard works within the remote desktop" but does not justify the selected fix for the current issue. The decisive behavior is: Printer availability depends on the configured print service and the session's printer redirection policy.
Remote session timeout policies can terminate abandoned sessions to free pooled capacity. This describes the separate situation "A user disconnects and leaves an idle session consuming capacity for many hours" but does not justify the selected fix for the current issue. The decisive behavior is: Printer availability depends on the configured print service and the session's printer redirection policy.
Consider this AVD design: A user requests that a powered-off personal VM start automatically when they open the remote desktop. The action is "Enable Start VM on Connect and validate the requisite AVD service identity permissions". Which statement explains this choice?
Start VM on Connect powers on supported stopped hosts in response to AVD brokered connection demand. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Session control operations are separate from persistent profile storage and application group configuration. This describes the separate situation "Help desk staff can see an active session that is unresponsive but do not want to delete its user profile" but does not justify the selected fix for the current issue. The decisive behavior is: Start VM on Connect powers on supported stopped hosts in response to AVD brokered connection demand.
Windows policy processing determines user experience settings independently of the host pool resource definition. This describes the separate situation "A shared host pool has inconsistent Start menu and Windows settings because user policies differ across OUs" but does not justify the selected fix for the current issue. The decisive behavior is: Start VM on Connect powers on supported stopped hosts in response to AVD brokered connection demand.
Clipboard redirection is an adjustable channel between local and remote sessions. This describes the separate situation "An administrator wants to disable clipboard transfer from corporate desktops to unmanaged client devices" but does not justify the selected fix for the current issue. The decisive behavior is: Start VM on Connect powers on supported stopped hosts in response to AVD brokered connection demand.
A remote desktop service needs to resolve this condition: A pooled host pool must preserve user settings across stateless Windows multi-session hosts. Select the best approach.
Select supported shared profile-container storage such as correctly configured Azure Files or Azure NetApp Files. FSLogix profile roaming relies on a network-accessible, supported location for user profile VHD containers. This action directly addresses the conditions in the scenario.
Separate shares or enforce authorized group-based ACLs and share-level role assignments. This would be appropriate for the different task-specific situation "One profile share serves users from different environments and has no permissions boundary between departments", because Isolation of users' profile data requires storage authorization in addition to Azure resource permissions. It does not directly resolve the stated condition, which calls for Select supported shared profile-container storage such as correctly configured Azure Files or Azure NetApp Files.
Configure the supported Azure Files AD DS identity-based SMB authentication and the required share permissions. This would be appropriate for the different task-specific situation "AD DS-joined session hosts must authenticate to Azure Files with existing domain users rather than storage account keys", because Identity-based authentication allows eligible Windows SMB users to access Azure Files with domain credentials and ACLs. It does not directly resolve the stated condition, which calls for Select supported shared profile-container storage such as correctly configured Azure Files or Azure NetApp Files.
Create a supported capacity pool and volume with an appropriate service level and quota. This would be appropriate for the different task-specific situation "An Azure NetApp Files profile storage design has no allocated capacity pool or volume throughput sizing", because Azure NetApp Files volume performance depends on service-level and capacity or throughput settings. It does not directly resolve the stated condition, which calls for Select supported shared profile-container storage such as correctly configured Azure Files or Azure NetApp Files.
A support ticket states: A finance review must compare always-on personal desktops with pooled autoscaled desktops. What is the most targeted remediation?
Model per-user experience, concurrency and runtime cost tradeoffs between personal and pooled designs. Dedicated assignment can increase idle compute spend while pooling trades isolation for consolidation. This action directly addresses the conditions in the scenario.
Plan workspace and application group assignments so users discover intended resources. This would be appropriate for the different task-specific situation "Users need one published workspace containing separate desktop and application resources", because Workspaces aggregate the AVD application groups presented to authorized users. It does not directly resolve the stated condition, which calls for Model per-user experience, concurrency and runtime cost tradeoffs between personal and pooled designs.
Use separate host pools and resource governance boundaries where different controls are required. This would be appropriate for the different task-specific situation "An organization needs different security policy scope for high-risk developers and ordinary staff", because Pool separation supports divergent VM baseline, app and access-policy requirements. It does not directly resolve the stated condition, which calls for Model per-user experience, concurrency and runtime cost tradeoffs between personal and pooled designs.
Validate Windows Server licensing and required Remote Desktop Services CAL eligibility. This would be appropriate for the different task-specific situation "An enterprise plans Windows Server session hosts and assumes its Windows client subscription covers all RDS access", because Windows Server remote desktop access licensing differs from licensing of supported Windows client multi-session desktops. It does not directly resolve the stated condition, which calls for Model per-user experience, concurrency and runtime cost tradeoffs between personal and pooled designs.
The approved remediation for "A private host pool is created but none of its session hosts can reach required Microsoft AVD control endpoints" is "Test required outbound service connectivity and correct proxy or firewall restrictions". Which Azure or Windows behavior explains this?
Session-host registration and ongoing broker signaling require reliable agent outbound communication. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Drain mode prevents new user sessions from landing on a host while allowing existing sessions to finish. This describes the separate situation "A production host must stop accepting new pooled connections while existing user sessions remain active" but does not justify the selected fix for the current issue. The decisive behavior is: Session-host registration and ongoing broker signaling require reliable agent outbound communication.
AVD host pool RDP properties apply remote experience options at the connection configuration layer. This describes the separate situation "An organization needs a custom remote display transport policy for a particular host pool" but does not justify the selected fix for the current issue. The decisive behavior is: Session-host registration and ongoing broker signaling require reliable agent outbound communication.
Start VM on Connect permits a supported AVD connection attempt to initiate a deallocated session host VM. This describes the separate situation "The IT team wants to turn on a powered-off personal VM only when its assigned user connects" but does not justify the selected fix for the current issue. The decisive behavior is: Session-host registration and ongoing broker signaling require reliable agent outbound communication.
An architect must address this AVD condition: An AVD disaster plan stores every approved VM image version only in the failed primary region. What should the team implement?
Replicate or publish the required tested Compute Gallery image versions to a recovery region. Secondary VM provisioning depends on availability of compatible image artifacts in that region. This action directly addresses the conditions in the scenario.
Use staged image updates or managed patching with host drain and controlled replacement windows. This would be appropriate for the different task-specific situation "A production pooled host pool needs monthly Windows security updates with minimal user disruption", because Update rings and drain procedures reduce the number of users affected by bad or disruptive updates. It does not directly resolve the stated condition, which calls for Replicate or publish the required tested Compute Gallery image versions to a recovery region.
Drain hosts, notify users and schedule a controlled sign-out and resource decommissioning sequence. This would be appropriate for the different task-specific situation "A host pool must be retired but some users still have active sessions and unsaved documents", because Decommissioning while users are active can lose unsaved work or interrupt profile disk detach. It does not directly resolve the stated condition, which calls for Replicate or publish the required tested Compute Gallery image versions to a recovery region.
Stage updates through maintenance rings and preserve enough healthy capacity for active sessions. This would be appropriate for the different task-specific situation "An administrator applies a cumulative update to every session host simultaneously and all users are disconnected", because Rolling updates retain service availability when a subset of hosts is undergoing maintenance. It does not directly resolve the stated condition, which calls for Replicate or publish the required tested Compute Gallery image versions to a recovery region.
The team adopts "Verify clipboard redirection permissions and the client feature support" for this AVD requirement: "An application cannot paste text from a local client even though its clipboard works within the remote desktop". Which explanation is correct?
Clipboard sharing requires a permitted remote device channel, not only Windows clipboard functionality on the host. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Windows policy processing determines user experience settings independently of the host pool resource definition. This describes the separate situation "A shared host pool has inconsistent Start menu and Windows settings because user policies differ across OUs" but does not justify the selected fix for the current issue. The decisive behavior is: Clipboard sharing requires a permitted remote device channel, not only Windows clipboard functionality on the host.
Windows printer selection rules can differ when locally redirected devices are present. This describes the separate situation "A remote help desk app prints to local devices but documents always use the wrong default printer" but does not justify the selected fix for the current issue. The decisive behavior is: Clipboard sharing requires a permitted remote device channel, not only Windows clipboard functionality on the host.
Session control operations are separate from persistent profile storage and application group configuration. This describes the separate situation "Help desk staff can see an active session that is unresponsive but do not want to delete its user profile" but does not justify the selected fix for the current issue. The decisive behavior is: Clipboard sharing requires a permitted remote device channel, not only Windows clipboard functionality on the host.
Please check your mailbox for a message from support@examlabs.com and follow the directions.