Question No. 1

You have an Azure Virtual Desktop deployment.

You plan to create a new host pool named Pool1 that will contain five Windows 11 session hosts.

You need to enable secure boot and vTPM on the session hosts.

How should you configure the Virtual Machines settings?

AEnable encryption at rest and a platform-managed key.

BSet Security type to Trusted launch virtual machines.

CEnable a system-assigned managed identity.

DSet Network security group to Advanced.

Show Answer

Correct Answer: B

Question No. 2

You have a Windows Virtual Desktop host pool.

You need to install Microsoft Antimalware for Azure on the session hosts.

What should you do?

AAdd an extension to each session host.

BFrom a Group Policy Object (GPO), enable Windows 10 security features.

CConfigure the RDP Properties of the host pool.

DSign in to each session host and install a Windows feature.

Show Answer

Correct Answer: A

https://docs.microsoft.com/en-us/azure/security/fundamentals/antimalware

Question No. 3

You have an Azure subscription. The subscription contains a virtual machine named Server1 that runs Windows Server and is deployed to the West US Azure region.

You deploy a new Azure Virtual Desktop host pool named HostPool1 to the East US Azure region.

You need to ensure that all the traffic between HostPool1 and Server1 is routed via the Microsoft backbone network.

What should you use?

Aservice endpoints

Bvirtual network peering

Crouting tables

DAzure Traffic Manager

Show Answer

Correct Answer: A

'Virtual Network (VNet) service endpoint provides secure and direct connectivity to Azure services over an optimized route over the Azure backbone network.' https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoints-overview

Question No. 4

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have the following:

A Microsoft 365 E5 tenant

An on-premises Active Directory domain

A hybrid Azure Active Directory (Azure AD) tenant

An Azure Active Directory Domain Services (Azure AD DS) managed domain

An Azure Virtual Desktop deployment

The Azure Virtual Desktop deployment contains personal desktops that are hybrid joined to the on-premises domain and enrolled in Microsoft Intune.

You need to configure the security settings for the Microsoft Edge browsers on the personal desktops.

Solution: You configure a configuration profile in Intune.

Does this meet the goal?

AYes

BNo

Show Answer

Correct Answer: A

https://docs.microsoft.com/en-us/mem/intune/fundamentals/azure-virtual-desktop

Question No. 5

You have an Azure Virtual Desktop deployment and the users shown in the following table.

All the users plan to use a web browser to access Azure Virtual Desktop resources.

Which users can connect to Azure Virtual Desktop by using their preferred browser?

AUser2 only

BUser1 only

CUser1, User2, and User3

DUser2 and User3 only

EUser1 and User2 only

Show Answer

Correct Answer: C

https://learn.microsoft.com/en-us/azure/virtual-desktop/users/connect-web

Free Microsoft AZ-140 Exam Actual Questions

The questions for AZ-140 were last updated On Nov 18, 2024