Amazon
Avaya
Checkpoint
Cisco®
CompTIA
CrowdStrike
EC-Council
EXIN
Fortinet
Google
ISC
ISC2
ITIL®
Juniper
Microsoft
Okta
Palo Alto Networks
Salesforce
All Vendors
  1. Home
  2. Microsoft
  3. AZ-140

Microsoft AZ-140 Exam (page: 8)
Microsoft Configuring and Operating Azure Virtual Desktop
Updated on: 25-Dec-2025

Viewing Page 8 of 43
AZ-140 PDF 341 Questions

You have an Azure Virtual Desktop deployment.

You plan to deploy Update Management to manage automated updates for server-based session hosts.

You need to configure the prerequisites for Update Management.

Which two actions should you perform? Each correct answer presents part of the solution.

Note: Each correct selection is worth one point.

  1. Create a Log Analytics workspace.
  2. Create an Azure Automation account.
  3. Create an Azure Service Health alert rule.
  4. Enable the Application Insights Agent.
  5. Configure Azure Network Watcher.

Answer(s): A,B

Explanation:

Azure Automation update management.
This reference architecture illustrates how to design a hybrid update management solution to manage updates on both Microsoft Azure and on-premises Windows and Linux computers.
Architecture



The architecture consists of the following services:
Log Analytics workspace: A Log Analytics workspace is a data repository for log data that's collected from resources that run in Azure, on-premises, or in another cloud provider.
Automation account: This is a cloud service that automates configuration and management across your Azure and non-Azure environments.
Etc.


Reference:

https://learn.microsoft.com/en-us/azure/architecture/hybrid/azure-update-mgmt



You have an Azure subscription named Subscription that contains an Azure Virtual Desktop host pool named HostPool1.
HostPool1 is managed by using Microsoft Intune. Subscription1 contains 50 users that connect to HostPool1 by using computers that run Windows 10.

You need to prevent the users from copying files between an Azure Virtual Desktop session and the computers. The solution must minimize administrative effort.

What should you do?

  1. Modify the RDP properties of HostPool1.
  2. Create a Conditional Access policy in Microsoft Entra.
  3. Create a compliance policy in Intune.
  4. Create a configuration profile in Intune.

Answer(s): A



DRAG DROP (Drag and Drop is not supported)

You have an Azure Virtual Desktop personal host pool. Each session host in the pool has an operating system disk and a data disk.

You need to back up the session host data disks.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Select and Place:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Step 1: Create a Recovery Services vault.
Use a Recovery Services vault to back up the disks only.

Create a vault
A vault stores backups and recovery points created over time, and stores backup policies associated with backed up machines. Create a vault as follows:

1. Sign in to the Azure portal.
2. In search, type Recovery Services. Under Services, click Recovery Services vaults.
3. In Recovery Services vaults menu, click +Add.

Step 2: Grant permissions for the vault.

Step 3: Create a backup policy and configure a backup.
Apply a backup policy
Configure a backup policy for the vault.


Reference:

https://azurealan.ie/2022/05/31/azure-backup-recovery-services-vault-versus-backup-vault/



You have an Azure Virtual Desktop deployment.

You plan to create a new host pool named Pool1 that will contain five Windows 11 session hosts.

You need to enable secure boot and vTPM on the session hosts.

How should you configure the Virtual Machines settings?

  1. Enable encryption at rest and a platform-managed key.
  2. Set Security type to Trusted launch virtual machines.
  3. Enable a system-assigned managed identity.
  4. Set Network security group to Advanced.

Answer(s): B



HOTSPOT (Drag and Drop is not supported)

You have an Azure Virtual Desktop host pool named HostPool1 that must support 60 sessions.

The session hosts for HostPool1 are configured as shown in the following exhibit.



Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

Note: Each correct selection is worth one point.

Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



HOTSPOT (Drag and Drop is not supported)

You have an Azure Virtual Desktop deployment that contains the resources shown in the following table.



You create the resources shown in the following table.



You need to meet following requirements:

Back up the FSLogix profile containers used by HostPool1.

Backup the data disks in HostPool2.

To which resources can you back up the profile containers and the data disks? To answer, select the appropriate options in the answer area.

Note: Each correct selection is worth one point.

Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Box 1: Recovery1
Back up the FSLogix profile containers used by HostPool1.

Recovery1 is in the same region.

The first step in configuring backup for Azure file shares is creating a Recovery Services vault. The vault gives you a consolidated view of the backups configured across different workloads.

Region: Select the geographic region for the vault. For you to create a vault to help protect any data source, the vault must be in the same region as the data source.

Box 2: Backup1
Backup the data disks in HostPool2.

Backup1 is in the same region.

Azure Disk Backup is a native, cloud-based backup solution that protects your data in managed disks. The first step in configuring backup for Azure Managed Disks is creating a Backup vault.

Azure Disk backup supports cross-subscription (backup vault in one subscription and the source disk in another) backup and restore. Currently, cross-region backup and restore aren't supported by Azure Disk backup, that is, the backup vault and disk to back up are in different regions. So, to use Azure Disk backup, ensure that the backup vault and disk to back up are in the same region.


Reference:

https://learn.microsoft.com/en-us/azure/backup/azure-file-share-backup-overview https://learn.microsoft.com/en-us/azure/backup/backup-create-recovery-services-vault https://learn.microsoft.com/en-us/azure/backup/backup-managed-disks



You have an Azure Virtual Desktop pooled host pool named HostPool1.

You need to dynamically allocate resources to HostPool1 based on the number of sessions for each host.

What should you create?

  1. a load balancer rule
  2. a scaling plan
  3. a virtual machine scale set
  4. an availability set

Answer(s): B

Explanation:

Autoscale lets you scale your session host virtual machines (VMs) in a host pool up or down to optimize deployment costs. You can create a scaling plan based on:
Time of day
Specific days of the week
Session limits per session host


Reference:

https://learn.microsoft.com/en-us/azure/virtual-desktop/autoscale-scaling-plan



You have an Azure Virtual Desktop personal host pool named Pool1 that contains 20 Microsoft Entra joined session hosts.

You need to ensure that only approved virtual machine extensions are installed on the Pool 1 session hosts.
The solution must minimize administrative effort.

What should you use?

  1. Azure Resource Manager (ARM) templates
  2. Azure Policy
  3. Windows Admin Center
  4. Group Policy

Answer(s): B

Explanation:

We [Microsoft] recently enabled the Azure CIS 1.1.0 (New) Policy which includes an Only approved VM extensions should be installed recommendation. This recommendation relies on a parameter set when adding the policy called List of virtual machine extensions that are approved for use. It is a semicolon separated list of approved extensions.


Reference:

https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/fyi-azure-cis-1-1-0-new-approved-vm- extensions-type-is-not-the/m-p/1155810



Viewing Page 8 of 43



Share your comments for Microsoft AZ-140 exam with other users:

Wang 6/9/2022 10:05:00 PM

pay attention to questions. they are very tricky. i waould say about 80 to 85% of the questions are in this exam dump.
UNITED STATES


gr 7/2/2023 7:03:00 AM

ques 4 answer should be c ie automatically recover from failure
Anonymous