You save $69.98
An administrator needs to correct the following: Windows Defender Antivirus real-time protection has been disabled on all new pooled session hosts. Which action is most relevant?
Restore and centrally manage supported antivirus real-time scanning with measured profile exclusions. Antimalware protection is part of a defense-in-depth baseline for AVD Windows session hosts. This action directly addresses the conditions in the scenario.
Apply Conditional Access and secure administrative access workflows to sensitive AVD operations. This would be appropriate for the different task-specific situation "Privileged operators connect from untrusted devices to production session hosts without strong authentication controls", because Strong identity and device conditions reduce the risk of unauthorized high-impact management activity. It does not directly resolve the stated condition, which calls for Restore and centrally manage supported antivirus real-time scanning with measured profile exclusions.
Delegate approved management access through narrowly scoped Azure and Windows administrative roles. This would be appropriate for the different task-specific situation "An administrator needs to troubleshoot a live host's vulnerability without giving broad local admin privileges to all help desk staff", because Least-privilege role separation limits the number of principals able to modify session-host configuration. It does not directly resolve the stated condition, which calls for Restore and centrally manage supported antivirus real-time scanning with measured profile exclusions.
Move secrets to a protected secret store or secure deployment path with least-privilege access. This would be appropriate for the different task-specific situation "A host pool stores a shared local administrator password in a Bicep parameter file committed to a repository", because Static credentials in source-controlled deployment artifacts can be copied and exposed to unintended readers. It does not directly resolve the stated condition, which calls for Restore and centrally manage supported antivirus real-time scanning with measured profile exclusions.
An Azure Virtual Desktop administrator observes: Windows Server session hosts are deployed for pooled desktops but the organization has not planned RDS CALs. Which response directly addresses this issue?
Confirm the required RDS licensing model and configure valid licensing servers or entitlement as applicable. Windows Server-hosted remote sessions have RDS licensing obligations distinct from Windows Enterprise multi-session rights. This action directly addresses the conditions in the scenario.
Choose the supported desktop or RemoteApp group types and publish through the intended workspace. This would be appropriate for the different task-specific situation "A host-pool administrator tries to place desktop and RemoteApp entitlements in incompatible application group arrangements", because Desktop and RemoteApp application groups represent different resource presentation and assignment models. It does not directly resolve the stated condition, which calls for Confirm the required RDS licensing model and configure valid licensing servers or entitlement as applicable.
Verify the personal host pool's assignment type and preserve or update its user-to-host mapping. This would be appropriate for the different task-specific situation "A personal desktop owner signs in but the pool automatically assigns the user a different VM after a rebuild", because Personal desktop access depends on a consistent valid assignment to a particular session host. It does not directly resolve the stated condition, which calls for Confirm the required RDS licensing model and configure valid licensing servers or entitlement as applicable.
Disable drain mode after verifying the host is healthy and ready for user traffic. This would be appropriate for the different task-specific situation "A host in drain mode remains excluded from fresh connections after patch maintenance finishes", because A session host stays unavailable for new placements until its drain state is removed. It does not directly resolve the stated condition, which calls for Confirm the required RDS licensing model and configure valid licensing servers or entitlement as applicable.
A Microsoft AZ-140 deployment review finds: A new browser release breaks a required internal extension on every host pool after an automatic update. What is the best corrective action?
Use controlled application version testing and staged release rings before widespread rollout. Staging browser updates reduces fleetwide disruption from extension or application incompatibilities. This action directly addresses the conditions in the scenario.
Check Windows App client support, Teams versions and installed redirection components. This would be appropriate for the different task-specific situation "A help desk reports that the Teams optimization status shows not optimized for a portion of users", because Media optimization depends on compatibility across the endpoint client and session-host software. It does not directly resolve the stated condition, which calls for Use controlled application version testing and staged release rings before widespread rollout.
Remove the app from the managed image or App attach entitlement and roll out a tested deployment change. This would be appropriate for the different task-specific situation "An organization must remove an unapproved application from all new AVD sessions while preserving existing profiles", because Application lifecycle controls determine availability, whereas user profile preservation is a separate concern. It does not directly resolve the stated condition, which calls for Use controlled application version testing and staged release rings before widespread rollout.
Validate both Teams optimization status and allowed client camera redirection policies. This would be appropriate for the different task-specific situation "Microsoft Teams calls work, but user cameras do not appear in sessions after a client policy change", because Teams real-time media and remote device redirection have separate compatibility and policy requirements. It does not directly resolve the stated condition, which calls for Use controlled application version testing and staged release rings before widespread rollout.
An AZ-140 reviewer recommends "Check the client-supported camera redirection settings and OS privacy permissions" for the issue "A remote meeting app cannot access the laptop's webcam even though the host has a working network". Which underlying behavior is decisive?
Webcam use in remote sessions requires a supported client and permitted redirected device channel. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Resource discovery reflects workspace entitlements separately from the ability to authenticate. This describes the separate situation "A user connects successfully but their published resources never appear in the client feed" but does not justify the selected fix for the current issue. The decisive behavior is: Webcam use in remote sessions requires a supported client and permitted redirected device channel.
Session control operations are separate from persistent profile storage and application group configuration. This describes the separate situation "Help desk staff can see an active session that is unresponsive but do not want to delete its user profile" but does not justify the selected fix for the current issue. The decisive behavior is: Webcam use in remote sessions requires a supported client and permitted redirected device channel.
Remote session timeout policies can terminate abandoned sessions to free pooled capacity. This describes the separate situation "A user disconnects and leaves an idle session consuming capacity for many hours" but does not justify the selected fix for the current issue. The decisive behavior is: Webcam use in remote sessions requires a supported client and permitted redirected device channel.
The operations team reports the following symptom: A storage account used by every profile container is scheduled for deletion during routine resource group cleanup. Which action should be taken first?
Protect and back up the profile share with suitable resource controls and independent recovery copies. Deleting central profile storage can remove every user's portable desktop settings at once. This action directly addresses the conditions in the scenario.
Include OS profile data, Outlook caches and application growth in storage forecasting. This would be appropriate for the different task-specific situation "An organization estimates FSLogix capacity using only the number of users and ignores expected application caches", because User profile container consumption depends on application behavior and retention, not only license count. It does not directly resolve the stated condition, which calls for Protect and back up the profile share with suitable resource controls and independent recovery copies.
Validate peering, route tables, private DNS resolution and storage access rules across both networks. This would be appropriate for the different task-specific situation "An SMB private endpoint is reachable from one VNet but inaccessible from another peered workspace VNet", because A private endpoint's existence does not automatically grant connectivity and name resolution from all peered networks. It does not directly resolve the stated condition, which calls for Protect and back up the profile share with suitable resource controls and independent recovery copies.
Analyze volume service-level throughput and resize capacity or throughput settings as supported. This would be appropriate for the different task-specific situation "An Azure NetApp Files volume experiences sustained throughput pressure during simultaneous profile logons", because ANF throughput and service-level quotas can constrain FSLogix operations under aggregate login load. It does not directly resolve the stated condition, which calls for Protect and back up the profile share with suitable resource controls and independent recovery copies.
Consider this AVD design: One hub-and-spoke VNet routes its AVD management traffic to a firewall that silently drops HTTPS. The action is "Examine effective routes, connection diagnostics and firewall rules for outbound AVD endpoints". Which statement explains this choice?
Effective routes and security filtering both govern whether the session host can reach AVD control services. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
Session density and display or multimedia behavior determine actual network capacity more reliably than the number of assigned users alone. This describes the separate situation "A call center is moving 900 concurrent users to Azure Virtual Desktop and lacks an estimate of peak RDP throughput" but does not justify the selected fix for the current issue. The decisive behavior is: Effective routes and security filtering both govern whether the session host can reach AVD control services.
Client-side internet path failures can prevent broker access without any failure in Azure session-host resources. This describes the separate situation "A help desk sees healthy host availability but only one ISP reports failed client-to-service connections" but does not justify the selected fix for the current issue. The decisive behavior is: Effective routes and security filtering both govern whether the session host can reach AVD control services.
Remote display performance depends on round-trip distance as well as application resource allocation. This describes the separate situation "Users in a distant geography report high interactive latency while all session hosts are placed in one remote Azure region" but does not justify the selected fix for the current issue. The decisive behavior is: Effective routes and security filtering both govern whether the session host can reach AVD control services.
For a deployment problem, "An enterprise chooses a very small VM type for 15 Office users without measuring memory pressure", administrators choose "Pilot realistic application sessions and adjust VM memory or host count based on monitoring". Why does that solve it?
Available memory and application working sets bound stable multi-session density. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.
A single resource-intensive app does not by itself prove every user needs dedicated desktop infrastructure. This describes the separate situation "A planning team proposes replacing all pooled desktops with personal VMs after noticing one application's high CPU use" but does not justify the selected fix for the current issue. The decisive behavior is: Available memory and application working sets bound stable multi-session density.
Azure resource groups establish a lifecycle and permission scope for related managed resources. This describes the separate situation "Development and production host pools share one resource group despite very different lifecycle needs" but does not justify the selected fix for the current issue. The decisive behavior is: Available memory and application working sets bound stable multi-session density.
Redundancy at the VM placement layer reduces the impact of a single zonal failure domain. This describes the separate situation "A pooled desktop service must remain available during a single Availability Zone outage" but does not justify the selected fix for the current issue. The decisive behavior is: Available memory and application working sets bound stable multi-session density.
A support ticket states: Users see profile mounting errors only on one host but the same VHD works on others. What is the most targeted remediation?
Review FSLogix logs and Windows event entries on the affected host before recreating profiles. Host-specific agent, registry or network issues can prevent attachment without corruption of the shared VHD. This action directly addresses the conditions in the scenario.
Verify the required FSLogix Profile or ODFC configuration and supported Outlook cache paths. This would be appropriate for the different task-specific situation "Outlook clients keep rebuilding their local mailbox caches on every pooled session host", because Roaming profile or Office data containers preserve supported application cache content between hosts. It does not directly resolve the stated condition, which calls for Review FSLogix logs and Windows event entries on the affected host before recreating profiles.
Assess whether ODFC is necessary because a full Profile Container already includes supported Microsoft 365 app data. This would be appropriate for the different task-specific situation "An FSLogix Profile Container deployment also creates a separate ODFC container without a clear user requirement", because A complete FSLogix Profile Container generally carries the user's profile data, reducing the need for a separate ODFC disk. It does not directly resolve the stated condition, which calls for Review FSLogix logs and Windows event entries on the affected host before recreating profiles.
Use App Masking for user experience and entitlement presentation, plus real access or execution security controls. This would be appropriate for the different task-specific situation "An administrator assumes FSLogix App Masking is a full security boundary against a malicious local administrator", because Application masking does not replace Windows privileges or security enforcement for privileged users. It does not directly resolve the stated condition, which calls for Review FSLogix logs and Windows event entries on the affected host before recreating profiles.
During an Azure Virtual Desktop migration, this problem appears: Users on older client builds frequently lose sessions during network roaming and do not get current multipath capabilities. Which solution fits?
Upgrade to supported Windows App versions and validate RDP Multipath connection status. Newer supported clients can use more resilient RDP transport paths and connection information surfaces. This action directly addresses the conditions in the scenario.
Configure supported multimedia redirection with a compatible client and browser extension. This would be appropriate for the different task-specific situation "An organization wants video playback in remote browser sessions optimized for lower CPU and bandwidth", because Multimedia redirection can shift eligible media rendering from the remote host to the local endpoint. It does not directly resolve the stated condition, which calls for Upgrade to supported Windows App versions and validate RDP Multipath connection status.
Update the personal host pool's user-to-desktop assignment through supported management tools. This would be appropriate for the different task-specific situation "A personal desktop user changes departments and their persistent VM should be reassigned to a colleague", because Personal desktop ownership mappings control which user receives a dedicated session-host VM. It does not directly resolve the stated condition, which calls for Upgrade to supported Windows App versions and validate RDP Multipath connection status.
Use supported session management to disconnect or sign out the affected session after appropriate notification. This would be appropriate for the different task-specific situation "Help desk staff can see an active session that is unresponsive but do not want to delete its user profile", because Session control operations are separate from persistent profile storage and application group configuration. It does not directly resolve the stated condition, which calls for Upgrade to supported Windows App versions and validate RDP Multipath connection status.
An architect must address this AVD condition: A profile backup restore test succeeds but its recovered SMB ACLs prevent users from mounting VHDs. What should the team implement?
Validate restored identity, file ownership and share permissions before declaring recovery complete. Recoverable bytes are insufficient if restored profiles cannot be authenticated and accessed. This action directly addresses the conditions in the scenario.
Stop rollout, isolate the bad image version and restore hosts from a known-good release. This would be appropriate for the different task-specific situation "A new AVD image release changes an agent component and only a subset of hosts can reconnect", because Controlled rollback minimizes user disruption while the incompatible image change is investigated. It does not directly resolve the stated condition, which calls for Validate restored identity, file ownership and share permissions before declaring recovery complete.
Standardize a versioned image rollout and plan replacement of older hosts. This would be appropriate for the different task-specific situation "Session hosts are patched independently and their application versions drift away from the approved golden image", because Immutable image release practices reduce long-term configuration divergence across a pooled fleet. It does not directly resolve the stated condition, which calls for Validate restored identity, file ownership and share permissions before declaring recovery complete.
Drain hosts, notify users and schedule a controlled sign-out and resource decommissioning sequence. This would be appropriate for the different task-specific situation "A host pool must be retired but some users still have active sessions and unsaved documents", because Decommissioning while users are active can lose unsaved work or interrupt profile disk detach. It does not directly resolve the stated condition, which calls for Validate restored identity, file ownership and share permissions before declaring recovery complete.
An administrator needs to correct the following: An App attach package is uploaded but users receive a package mounting or accessibility error. Which action is most relevant?
Verify the package image location, share access, identity and host permissions. App attach requires session hosts to read or mount the package artifact at the configured storage path. This action directly addresses the conditions in the scenario.
Configure Files On-Demand and appropriate profile or storage capacity planning. This would be appropriate for the different task-specific situation "OneDrive sync fills session host OS disks because large synchronized files are cached without capacity controls", because Files On-Demand reduces unnecessary full-content downloads for eligible OneDrive files. It does not directly resolve the stated condition, which calls for Verify the package image location, share access, identity and host permissions.
Assign the appropriate user group and associate the app group with a workspace. This would be appropriate for the different task-specific situation "A RemoteApp application group exists but no employee can see the published application", because Published application visibility depends on both user entitlement and workspace feed association. It does not directly resolve the stated condition, which calls for Verify the package image location, share access, identity and host permissions.
Evaluate supported managed App attach delivery or scripted deployment based on application packaging support. This would be appropriate for the different task-specific situation "An application owner wants to update a line-of-business program without rebuilding the entire desktop image", because Separating application delivery from a golden image can simplify approved app lifecycle updates. It does not directly resolve the stated condition, which calls for Verify the package image location, share access, identity and host permissions.
Please check your mailbox for a message from support@examlabs.com and follow the directions.
