You save $69.98
AZ-140 Premium Bundle
- Premium File 372 Questions & Answers
- Last Update: Oct 25, 2026
- Training Course 79 Lectures
- Study Guide 430 Pages
You save $69.98
An administrator needs to correct the following: A domain-joined source VM is captured with its existing computer account and deployed to dozens of hosts. Which action is most relevant?
Use the supported generalized image process and domain-join each newly provisioned VM separately. Cloning a unique joined-machine identity can create domain trust and management conflicts. This action directly addresses the conditions in the scenario.
Rebuild or replace session hosts through a controlled rollout referencing the desired tested version. This would be appropriate for the different task-specific situation "A host pool uses an outdated gallery image despite a newer image version being available", because Publishing a new gallery version does not automatically patch all existing session-host VMs. It does not directly resolve the stated condition, which calls for Use the supported generalized image process and domain-join each newly provisioned VM separately.
Keep user profiles on FSLogix or another supported roaming store separate from the immutable host image. This would be appropriate for the different task-specific situation "Users lose their settings after session hosts are replaced using a new image version", because Golden images manage machine configuration, while persistent user state requires an independent storage path. It does not directly resolve the stated condition, which calls for Use the supported generalized image process and domain-join each newly provisioned VM separately.
Version control image customization steps and include automated validation of required agent versions. This would be appropriate for the different task-specific situation "A generated image includes an outdated security agent because the manual build instructions were not updated", because An image pipeline prevents undocumented machine changes from silently becoming the deployment baseline. It does not directly resolve the stated condition, which calls for Use the supported generalized image process and domain-join each newly provisioned VM separately.
For the scenario "An organization wants video playback in remote browser sessions optimized for lower CPU and bandwidth", a team selects "Configure supported multimedia redirection with a compatible client and browser extension". Which technical principle best explains why it works?
Multimedia redirection can shift eligible media rendering from the remote host to the local endpoint. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Resource discovery reflects workspace entitlements separately from the ability to authenticate. This describes the separate situation "A user connects successfully but their published resources never appear in the client feed" but does not justify the selected fix for the current issue. The decisive behavior is: Multimedia redirection can shift eligible media rendering from the remote host to the local endpoint.
Session control operations are separate from persistent profile storage and application group configuration. This describes the separate situation "Help desk staff can see an active session that is unresponsive but do not want to delete its user profile" but does not justify the selected fix for the current issue. The decisive behavior is: Multimedia redirection can shift eligible media rendering from the remote host to the local endpoint.
Remote session timeout policies can terminate abandoned sessions to free pooled capacity. This describes the separate situation "A user disconnects and leaves an idle session consuming capacity for many hours" but does not justify the selected fix for the current issue. The decisive behavior is: Multimedia redirection can shift eligible media rendering from the remote host to the local endpoint.
The Azure Virtual Desktop team plans to "Confirm the required RDS licensing model and configure valid licensing servers or entitlement as applicable" because: Windows Server session hosts are deployed for pooled desktops but the organization has not planned RDS CALs. Which explanation supports the plan?
Windows Server-hosted remote sessions have RDS licensing obligations distinct from Windows Enterprise multi-session rights. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
AVD application group assignments control which users are entitled to publishable desktop resources. This describes the separate situation "A call center wants a desktop resource visible only to an authorized employee group" but does not justify the selected fix for the current issue. The decisive behavior is: Windows Server-hosted remote sessions have RDS licensing obligations distinct from Windows Enterprise multi-session rights.
Desktop and RemoteApp application groups represent different resource presentation and assignment models. This describes the separate situation "A host-pool administrator tries to place desktop and RemoteApp entitlements in incompatible application group arrangements" but does not justify the selected fix for the current issue. The decisive behavior is: Windows Server-hosted remote sessions have RDS licensing obligations distinct from Windows Enterprise multi-session rights.
AVD service placement depends on completed host-pool registration, not simply Azure VM creation. This describes the separate situation "A PowerShell automation creates only session-host Azure VMs but never registers their AVD agent" but does not justify the selected fix for the current issue. The decisive behavior is: Windows Server-hosted remote sessions have RDS licensing obligations distinct from Windows Enterprise multi-session rights.
An AZ-140 reviewer recommends "Set the supported VHDLocations or Cloud Cache path settings under the correct registry policy scope" for the issue "A new FSLogix installation uses a default profile storage location that does not exist". Which underlying behavior is decisive?
FSLogix profile mount processing depends on explicit and valid configured storage locations. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
App Masking can control application visibility without reinstalling the app per user. This describes the separate situation "An application that is installed on all pooled session hosts must be hidden from nonlicensed users" but does not justify the selected fix for the current issue. The decisive behavior is: FSLogix profile mount processing depends on explicit and valid configured storage locations.
ODFC targets specific Office application data rather than replacing the full Windows user profile. This describes the separate situation "An organization uses a third-party profile method but needs Outlook and other Office cache data to roam" but does not justify the selected fix for the current issue. The decisive behavior is: FSLogix profile mount processing depends on explicit and valid configured storage locations.
Simultaneous container attachment needs coordinated handling to prevent conflicting profile writes. This describes the separate situation "A user tries to sign in to two pooled session hosts concurrently and both are set to write the same VHD" but does not justify the selected fix for the current issue. The decisive behavior is: FSLogix profile mount processing depends on explicit and valid configured storage locations.
The operations team reports the following symptom: An administrator wants to disable clipboard transfer from corporate desktops to unmanaged client devices. Which action should be taken first?
Configure applicable host pool RDP clipboard redirection properties and device management controls. Clipboard redirection is an adjustable channel between local and remote sessions. This action directly addresses the conditions in the scenario.
Review host pool load balancing and session caps to distribute connections appropriately. This would be appropriate for the different task-specific situation "A pooled desktop host's maximum session limit causes users to wait although spare CPU exists on other hosts", because Placement settings can prevent optimal use of available pooled compute capacity. It does not directly resolve the stated condition, which calls for Configure applicable host pool RDP clipboard redirection properties and device management controls.
Configure Universal Print or another supported remote printing workflow with user permissions. This would be appropriate for the different task-specific situation "Office employees cannot print to a managed company printer from remote AVD sessions", because Printer availability depends on the configured print service and the session's printer redirection policy. It does not directly resolve the stated condition, which calls for Configure applicable host pool RDP clipboard redirection properties and device management controls.
Associate authorized application groups with the workspace and verify assignments and feed refresh. This would be appropriate for the different task-specific situation "The business requires users to see a curated set of resources after signing in to Windows App", because AVD workspaces are the discovery grouping for users' published desktops and RemoteApps. It does not directly resolve the stated condition, which calls for Configure applicable host pool RDP clipboard redirection properties and device management controls.
Consider this AVD design: A recovery strategy sets an RTO of one hour but has never measured image deployment and profile restore times. The action is "Run a disaster recovery rehearsal and verify actual end-to-end RTO and RPO". Which statement explains this choice?
Recovery plans should be tested against achievable service restoration and data loss objectives. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Regional compute failover without profile availability leaves users unable to resume normal desktop work. This describes the separate situation "A company plans a multi-region AVD deployment with only one centralized profile storage share in the primary region" but does not justify the selected fix for the current issue. The decisive behavior is: Recovery plans should be tested against achievable service restoration and data loss objectives.
Update rings and drain procedures reduce the number of users affected by bad or disruptive updates. This describes the separate situation "A production pooled host pool needs monthly Windows security updates with minimal user disruption" but does not justify the selected fix for the current issue. The decisive behavior is: Recovery plans should be tested against achievable service restoration and data loss objectives.
Session hosts are replaceable, but user profiles need independent protection and availability. This describes the separate situation "An organization relies on locally stored user profiles when replacing pooled session hosts during disaster recovery" but does not justify the selected fix for the current issue. The decisive behavior is: Recovery plans should be tested against achievable service restoration and data loss objectives.
A remote desktop service needs to resolve this condition: A Cloud Cache local cache disk fills after multiple high-volume user sessions. Select the best approach.
Monitor cache space and configure appropriate cache cleanup and capacity controls. A local profile cache requires sufficient free disk space even when authoritative profile providers are remote. This action directly addresses the conditions in the scenario.
Use supported FSLogix storage plus an independently tested snapshot and backup strategy. This would be appropriate for the different task-specific situation "A tenant wants both profile portability and recoverable historical profile data", because FSLogix provides profile roaming, while separate storage protection covers deletion and corruption recovery. It does not directly resolve the stated condition, which calls for Monitor cache space and configure appropriate cache cleanup and capacity controls.
Inspect FSLogix profile service logs and configured profile container locations. This would be appropriate for the different task-specific situation "A team cannot determine which profile disk FSLogix attempted to mount during a failed sign-in", because FSLogix diagnostics record relevant VHD discovery, attachment and authentication errors. It does not directly resolve the stated condition, which calls for Monitor cache space and configure appropriate cache cleanup and capacity controls.
Assess whether ODFC is necessary because a full Profile Container already includes supported Microsoft 365 app data. This would be appropriate for the different task-specific situation "An FSLogix Profile Container deployment also creates a separate ODFC container without a clear user requirement", because A complete FSLogix Profile Container generally carries the user's profile data, reducing the need for a separate ODFC disk. It does not directly resolve the stated condition, which calls for Monitor cache space and configure appropriate cache cleanup and capacity controls.
A support ticket states: An Entra joined host is registered but its assigned users lack an eligible Windows login role. What is the most targeted remediation?
Assign the supported VM User Login entitlement at the appropriate scope for the required scenario. Entra-joined VM sign-in authorization may depend on Azure role assignments in addition to AVD app group access. This action directly addresses the conditions in the scenario.
Ensure correct AD DS or hybrid Kerberos trust, DNS and account permissions for that application. This would be appropriate for the different task-specific situation "A legacy Windows application inside AVD uses an on-premises service principal name for integrated authentication", because Broker authentication to AVD and Kerberos authentication to a legacy app are separate operations. It does not directly resolve the stated condition, which calls for Assign the supported VM User Login entitlement at the appropriate scope for the required scenario.
Correct time synchronization, DNS and identity service connectivity before repeating the join. This would be appropriate for the different task-specific situation "A newly joined session host has device join errors caused by time skew and unreachable identity endpoints", because Modern identity sign-in and device registration rely on reachable endpoints and valid authentication timing. It does not directly resolve the stated condition, which calls for Assign the supported VM User Login entitlement at the appropriate scope for the required scenario.
Configure supported Microsoft Entra single sign-on and validate host and client prerequisites. This would be appropriate for the different task-specific situation "An AVD sign-in process asks users to authenticate to the broker and then enter credentials again at Windows", because AVD single sign-on can reduce repeated authentication prompts when its identity conditions are met. It does not directly resolve the stated condition, which calls for Assign the supported VM User Login entitlement at the appropriate scope for the required scenario.
During an Azure Virtual Desktop migration, this problem appears: Pooled session hosts become unstable after more simultaneous logons than memory capacity supports. Which solution fits?
Set a realistic maximum session limit based on observed user-density testing. The maximum session limit constrains placement but must be derived from workload and VM memory performance. This action directly addresses the conditions in the scenario.
Organize subscriptions with management groups and apply Azure Policy at appropriate scopes. This would be appropriate for the different task-specific situation "The business wants a policy boundary for virtual desktop workloads across multiple subscriptions", because Management groups provide governance and policy inheritance across subscription hierarchies. It does not directly resolve the stated condition, which calls for Set a realistic maximum session limit based on observed user-density testing.
Use separate host pools and resource governance boundaries where different controls are required. This would be appropriate for the different task-specific situation "An organization needs different security policy scope for high-risk developers and ordinary staff", because Pool separation supports divergent VM baseline, app and access-policy requirements. It does not directly resolve the stated condition, which calls for Set a realistic maximum session limit based on observed user-density testing.
Plan workspace and application group assignments so users discover intended resources. This would be appropriate for the different task-specific situation "Users need one published workspace containing separate desktop and application resources", because Workspaces aggregate the AVD application groups presented to authorized users. It does not directly resolve the stated condition, which calls for Set a realistic maximum session limit based on observed user-density testing.
An architect must address this AVD condition: A proposed architecture places a personal desktop and a shared pooled desktop in one host pool. What should the team implement?
Create separate host pools for incompatible personal versus pooled assignment requirements. Personal and pooled host pool types have different user-assignment and session-placement behavior. This action directly addresses the conditions in the scenario.
Model peak sessions, IOPS and application type per pool in the sizing assessment. This would be appropriate for the different task-specific situation "IT cannot calculate expected storage traffic because each 100-user host pool has different login timing", because Identical user counts can produce different storage and compute load because of usage patterns. It does not directly resolve the stated condition, which calls for Create separate host pools for incompatible personal versus pooled assignment requirements.
Plan independent compute, identity and profile storage recovery in a supported secondary region. This would be appropriate for the different task-specific situation "A disaster recovery requirement demands desktops in a second Azure region when the primary region fails", because Host pools alone do not guarantee user access if regional compute or profile storage remains unavailable. It does not directly resolve the stated condition, which calls for Create separate host pools for incompatible personal versus pooled assignment requirements.
Design roaming profiles and external user data storage rather than relying on disposable local disks. This would be appropriate for the different task-specific situation "A multisession desktop is configured with ephemeral OS disks and the team assumes local user files persist through replacement", because Ephemeral host disks are unsuitable as the only durable store for user files or settings. It does not directly resolve the stated condition, which calls for Create separate host pools for incompatible personal versus pooled assignment requirements.
An administrator needs to correct the following: Windows Defender Antivirus real-time protection has been disabled on all new pooled session hosts. Which action is most relevant?
Restore and centrally manage supported antivirus real-time scanning with measured profile exclusions. Antimalware protection is part of a defense-in-depth baseline for AVD Windows session hosts. This action directly addresses the conditions in the scenario.
Apply Conditional Access and secure administrative access workflows to sensitive AVD operations. This would be appropriate for the different task-specific situation "Privileged operators connect from untrusted devices to production session hosts without strong authentication controls", because Strong identity and device conditions reduce the risk of unauthorized high-impact management activity. It does not directly resolve the stated condition, which calls for Restore and centrally manage supported antivirus real-time scanning with measured profile exclusions.
Delegate approved management access through narrowly scoped Azure and Windows administrative roles. This would be appropriate for the different task-specific situation "An administrator needs to troubleshoot a live host's vulnerability without giving broad local admin privileges to all help desk staff", because Least-privilege role separation limits the number of principals able to modify session-host configuration. It does not directly resolve the stated condition, which calls for Restore and centrally manage supported antivirus real-time scanning with measured profile exclusions.
Move secrets to a protected secret store or secure deployment path with least-privilege access. This would be appropriate for the different task-specific situation "A host pool stores a shared local administrator password in a Bicep parameter file committed to a repository", because Static credentials in source-controlled deployment artifacts can be copied and exposed to unintended readers. It does not directly resolve the stated condition, which calls for Restore and centrally manage supported antivirus real-time scanning with measured profile exclusions.
Please check your mailbox for a message from support@examlabs.com and follow the directions.