QUESTION 55
You deploy an Azure Virtual Desktop session host pool.
You need to provide a group of pilot users access to the virtual machines in the pool.
What should you do?

QUESTION 56
You have an Azure virtual machine named VM1 that runs Windows 10 Enterprise multi-session.
You plan to add language packs to VM1 and create a custom image of VM1 for a Windows Virtual Desktop host pool.
You need to ensure that modern apps can use the additional language packs when you deploy session hosts by using the custom image.
Which command should you run first? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

QUESTION 57
You have a hybrid Azure Active Directory (Azure AD) tenant named contoso.com that contains the users shown in the following table.

You have an Azure Virtual Desktop host pool. All the session hosts have a folder named C:Folder1.
You create an FSLogix Application Masking rule as shown in the following exhibit.

You create assignments for the Application Masking rule as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

QUESTION 58
You have an Azure Virtual Desktop host pool named Pool1 in the East US region.
You have a storage account named storage1 that contains FSLogix profile containers. In the East US region, you have a shared image gallery named SIG1 that contains a virtual machine image named Image1. Image1 is used to create new session hosts in Pool1.
You plan to deploy a new Azure Virtual Desktop host pool named Pool2 to the South India region.
You need to implement a session host deployment solution for Pool2 that meets the following requirements:
Image1 must replicate in the South India region.
The session hosts in Pool2 must be based on Image1.
Changes to Image1 must be available in the South India and East US regions.
What should you include in the solution?

QUESTION 59
You have an Azure Virtual Desktop host pool named Pool1.
You need to ensure that you can create an Azure NetApp Files volume that will host user profiles for Pool1.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select.

QUESTION 60
Which of the following would help you in identifying the common issues and verifying that Azure Virtual Desktop (AVD) is following the best practices?

QUESTION 61
Which two roles should you assign to Admin2 to meet the security requirements? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

QUESTION 62
You have a Windows Virtual Desktop deployment.
You publish a RemoteApp named AppVersion1.
You need AppVersion1 to appear in the Remote Desktop client as Sales Contact Application.
Which PowerShell cmdlet should you use?

QUESTION 63
You plan to deploy Azure Virtual Desktop.
You are deploying Storage Spaces Direct to a cluster that will store FSLogix profile containers. The cluster will NOT use Cloud witness.
What is the minimum number of virtual machines required for the cluster?

QUESTION 64
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have the following:
A Microsoft 365 E5 tenant
An on-premises Active Directory domain
A hybrid Azure Active Directory (Azure AD) tenant
An Azure Active Directory Domain Services (Azure AD DS) managed domain
An Azure Virtual Desktop deployment
The Azure Virtual Desktop deployment contains personal desktops that are hybrid joined to the on-premises domain and enrolled in Microsoft Intune.
You need to configure the security settings for the Microsoft Edge browsers on the personal desktops.
Solution: You configure a Group Policy Object (GPO) in the Azure AD DS managed domain.
Does this meet the goal?

QUESTION 65
You have a Azure Virtual Desktop deployment.
In Azure Advisor, you discover the following recommendation related to Azure Virtual Desktop:
* Impact Medium
* Description: No validation environment enabled
* Potential Benefit Ensure business continuity through AVD service deployments
* Impacted Resource:1 Host Pool
What can you validate by implementing the recommendations?

QUESTION 66
You have an Azure Virtual Desktop deployment that contains the resources shown in the following table.

You need to enable just-in-time (JIT) VM access for all the session hosts.
What should you do first?

QUESTION 67
Your network contains an on-premises Active Directory domain named contoso.com.
You have an Azure subscription that contains the resources shown in the following table.

You need to create a share that will host FSLogix profiles for AVDPool1. The solution must meet the following requirements:
* Maximize read and write performance for the profiles.
* Control access to the SMB share by using the users and groups stored in contoso.com.
Which account should you use to host the share?

QUESTION 68
You have a Windows Virtual Desktop deployment.
You need to ensure that all the connections to the managed resources in the host pool require multi-factor authentication (MFA).
Which two settings should you modify in a conditional access policy? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

QUESTION 69
You have a Windows Virtual Desktop host pool that contains 20 Windows 10 Enterprise multi-session hosts.
Users connect to the Windows Virtual Desktop deployment from computers that run Windows 10.
You plan to implement FSLogix Application Masking.
You need to deploy Application Masking rule sets. The solution must minimize administrative effort.
To where should you copy the rule sets?

QUESTION 70
You have an Azure subscription that contains the resources shown in the following table.

You create a recovery services vault named Vault1.
Which resources can you back up using Azure Backup to Vault1?

QUESTION 71
Your on-premises network contains an Active Directory domain named contoso.com that syncs with Azure AD.
You deploy an Azure Virtual Desktop pooled host pool named HostPool1 that contains five hybrid-joined session hosts.
You need to ensure that all the user sessions of HostPool1 meet the following requirements:
* Users must use roaming user profiles.
* Users must use Folder Redirection.
The solution must minimize administrative effort.
What should you use to meet each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

QUESTION 72
You deploy a Azure Virtual Desktop host pool named Pool1.
You have an Azure Storage account named store1 that stores FSLogix profile containers in a share named profiles.
You need to configure the path to the storage containers for the session hosts.
Which path should you use?

QUESTION 73
Case Study 2 – Litware, Inc
Overview
Litware, Inc. is a pharmaceutical company that has a main office in Boston, United States, and a remote office in Chennai, India.
Existing Environment. Identity Environment
The network contains an on-premises Active Directory domain named litware.com that syncs to an Azure Active Directory (Azure AD) tenant named litware.com.
The Azure AD tenant contains the users shown in the following table.

All users are registered for Azure Multi-Factor Authentication (MFA).
Existing Environment. Cloud Services
Litware has a Microsoft 365 E5 subscription associated to the Azure AD tenant. All users are assigned Microsoft 365 Enterprise E5 licenses.
Litware has an Azure subscription associated to the Azure AD tenant. The subscription contains the resources shown in the following table.

Litware uses custom virtual machine images and custom scripts to automatically provision Azure virtual machines and join the virtual machines to the on-premises Active Directory domain.
Network and DNS
The offices connect to each other by using a WAN link. Each office connects directly to the internet.
All DNS queries for internet hosts are resolved by using DNS servers in the Boston office, which point to root servers on the internet. The Chennai office has caching-only DNS servers that forward queries to the DNS servers in the Boston office.
Requirements. Planned Changes
Litware plans to implement the following changes:
* Deploy Azure Virtual Desktop environments to the East US Azure region for the users in the Boston office and to the South India Azure region for the users in the Chennai office.
* Implement FSLogix profile containers.
* Optimize the custom virtual machine images for the Azure Virtual Desktop session hosts.
* Use PowerShell to automate the addition of virtual machines to the Azure Virtual Desktop host pools.
Requirements. Performance Requirements
Litware identifies the following performance requirements:
* Minimize network latency of the Azure Virtual Desktop connections from the Boston and Chennai offices.
* Minimize latency of the Azure Virtual Desktop host authentication in each Azure region.
* Minimize how long it takes to sign in to the Azure Virtual Desktop session hosts.
Requirements. Authentication Requirements
Litware identifies the following authentication requirements:
* Enforce Azure MFA when accessing Azure Virtual Desktop apps.
* Force users to reauthenticate if their Azure Virtual Desktop session lasts more than eight hours.
Requirements. Security Requirements
Litware identifies the following security requirements:
* Explicitly allow traffic between the Azure Virtual Desktop session hosts and Microsoft 365.
* Explicitly allow traffic between the Azure Virtual Desktop session hosts and the Azure Virtual Desktop infrastructure.
* Use built-in groups for delegation.
* Delegate the management of app groups to Admin2, including the ability to publish app groups to users and user groups.
* Grant Admin1 permissions to manage workspaces, including listing which apps are assigned to the app groups.
* Minimize administrative effort to manage network security.
* Use the principle of least privilege.
Requirements. Deployment Requirements
Litware identifies the following deployment requirements:
* Use PowerShell to generate the token used to add the virtual machines as session hosts to a Azure Virtual Desktop host pool.
* Minimize how long it takes to provision the Azure Virtual Desktop session hosts based on the custom virtual machine images.
* Whenever possible, preinstall agents and apps in the custom virtual machine images.
User Profile Requirements
Litware identifies the following user profile requirements:
* In storage1, store user profiles for the Boston office users.
* Ensure that the user profiles for the Boston office users replicate synchronously between two Azure regions.
* Ensure that Admin1 uses a local profile only when signing in to the Azure Virtual Desktop session hosts.
Hotspot Question
You need to recommend a DNS infrastructure that meets the performance requirements.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

QUESTION 74
Hotspot Question
You have an Azure Virtual Desktop host pool named HostPool1 that must support 60 sessions.
The session hosts for HostPool1 are configured as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

QUESTION 75
You have a storage account named storage1 that contains FSLogix profile containers. In the East US region, you have an Azure compute gallery named SIG1 that contains a virtual machine image named Image1. Image1 is used to create new session hosts in Pool1.
You plan to deploy a new Azure Virtual Desktop host pool named Pool2 to the South India region.
You need to implement a session host deployment solution for Pool2 that meets the following requirements:
– Image1 must replicate to the South India region.
– The session hosts in Pool2 must be based on Image1.
– Changes to Image1 must be available in the South India and East US
regions.
What should you include in the solution?

QUESTION 76
The scaling tool offers a low-cost automation solution for the customers who are looking towards optimizing their session host Virtual Machine costs. It uses several tools or apps like PowerShell runbook, Azure Automation account, the Azure Logic App, and a webhook to work. What happens when the scaling tool runs?

QUESTION 77
You have a Windows Virtual Desktop host pool named Pool1 and an Azure Storage account named Storage1.
Storage1 stores FSLogix profile containers in a share folder named share1.
You create a new group named Group1. You provide Group1 with permission to sign in to Pool1.
You need to ensure that the members of Group1 can store the FSLogix profile containers in share1. The solution must use the principle of least privilege.
Which two privileges should you assign to Group1? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

QUESTION 78
You have an on-premises network.
All users have computers that run Windows 10 Pro.
You plan to deploy Azure Virtual Desktop to meet the department requirements shown in the following table.

You need to recommend licenses for the departments. The solution must minimize costs.
Which license should you recommend for each department? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

QUESTION 79
Your network contains an on-premises Active Directory domain named contoso.com that syncs to an Azure Active Directory (Azure AD) tenant.
You have an Azure Virtual Desktop host pool named Pool1 that has the following settings:
Host pool name: Pool1
Host pool type: Personal
Load balancing algorithm: Breadth-first
Number of VMs: 3
The session hosts have the following configurations:
Image used to create the virtual machines: Windows 10 Enterprise
Virtual machines domain-joined to: On-premises contoso.com domain
You need to ensure that you can use Microsoft EndPoint Manager to manage security update on the session hosts.
What should you do?