You have an Azure Virtual Desktop deployment that contains multiple host pools. You need to create a PowerShell script to sign users out of a specific session host before you perform a maintenance task. Which PowerShell module should you load in the script?
You have an on-premises network and an Azure subscription. The subscription contains the following: - A virtual network - An Azure Firewall instance - An Azure Virtual Desktop host pool The virtual network connects to the on-premises network by using a site-to-site VPN. You need to ensure that only users from the on-premises network can connect to the Azure Virtual Desktop managed resources in the host pool. The solution must minimize administrative effort. What should you configure?
Question 103
You have an Azure Virtual Desktop deployment that uses Microsoft 365 cloud services including Microsoft Teams. Users use the Remote Desktop client to connect to the deployment from computers that run Windows 10. You need to support audio and video in Azure Virtual Desktop and provide the users with access to Microsoft Teams calling and meeting features. Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
You have an Azure Virtual Desktop host pool named Pool1 that contains three session hosts. The session hosts are configured to use FSLogix profile containers. You need to configure Cloud Cache on the session hosts. What should you do?
You have an Azure Virtual Desktop deployment. You implement FSLogix profile containers. You need to ensure that the FSLogix profile containers are not used for specific users. What should you do?
HOTSPOT - You have a hybrid Azure Active Directory (Azure AD) tenant named contoso.com that contains the users shown in the following table. You have an Azure Virtual Desktop host pool. All the session hosts have a folder named C:\Folder1. You create an FSLogix Application Masking rule as shown in the following exhibit. You create assignments for the Application Masking rule as shown in the following exhibit. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have the following: - A Microsoft 365 E5 tenant - An on-premises Active Directory domain - A hybrid Azure Active Directory (Azure AD) tenant - An Azure Active Directory Domain Services (Azure AD DS) managed domain - An Azure Virtual Desktop deployment The Azure Virtual Desktop deployment contains personal desktops that are hybrid joined to the on-premises domain and enrolled in Microsoft Intune. You need to configure the security settings for the Microsoft Edge browsers on the personal desktops. Solution: You configure a Group Policy Object (GPO) in the Azure AD DS managed domain. Does this meet the goal?
You have an Azure Virtual Desktop deployment and the users shown in the following table. All the users plan to use a web browser to access Azure Virtual Desktop resources. Which users can connect to Azure Virtual Desktop by using their preferred browser?
Connect to Azure Virtual Desktop with the web client, supported browsers. While any HTML5-capable browser should work, we officially support the following operating systems and browsers: Mozilla Firefox - Windows, macOS, Linux (User1) Apple Safari - macOS (User3) Note: There is no answer option for User1 and User3 only, so we go for User1, User2 and User3. Incorrect: Internet Explorer not supported (not User2) As of September 30, 2021, the Azure Virtual Desktop web client no longer supports Internet Explorer. We recommend that you use Microsoft Edge to connect to the web client instead. Reference: https://docs.microsoft.com/en-us/azure/virtual-desktop/user-documentation/connect-web
Question 109
Your on-premises network contains 20 Windows 10 devices. You have an Azure Virtual Desktop deployment. You need to deploy the Microsoft Remote Desktop client (MSRDC) to the devices. The MSRDC must be available to everyone who sign in to the devices. What should you do?
Although your users can install the client directly after downloading it, if you're deploying to multiple devices, you may want to also deploy the client to them through other means. Deploying using group policies or the Microsoft Endpoint Configuration Manager lets you run the installer silently using a command line. Run the following commands to deploy the client per-device or per-user. Per-device installation - msiexec.exe /I <path to the MSI> /qn ALLUSERS=1 Incorrect: Per-user installation - msiexec.exe /i `<path to the MSI>` /qn ALLUSERS=2 MSIINSTALLPERUSER=1 Reference: https://docs.microsoft.com/en-us/windows-server/remote/remote-desktop-services/clients/windowsdesktop-admin
Question 110
Your network contains an on-premises Active Directory domain named contoso.com. You have an Azure subscription that contains the resources shown in the following table. You need to create a share that will host FSLogix profiles for AVDPool1. The solution must meet the following requirements: * Maximize read and write performance for the profiles. * Control access to the SMB share by using the users and groups stored in contoso.com. Which account should you use to host the share?
You can create FSLogix profile containers using Azure NetApp Files, an easy-to-use Azure native platform service that helps customers quickly and reliably provision enterprise-grade SMB volumes for their Azure Virtual Desktop environments. We [Microsoft] recommend using FSLogix profile containers as a user profile solution for the Azure Virtual Desktop service. FSLogix profile containers store a complete user profile in a single container and are designed to roam profiles in non-persistent remote computing environments like Azure Virtual Desktop. Create and manage Active Directory connections for Azure NetApp Files. Azure NetApp Files supports both Active Directory Domain Services (AD DS) and Azure Active Directory Domain Services (AADDS) for AD connections. Incorrect: Not C: Not the preferred solution. Note: You can create an Azure file share authenticated by a domain controller on an existing Azure Virtual Desktop host pool. You can use this file share to store storage profiles. Assign Azure RBAC permissions to Azure Virtual Desktop users All users that need to have FSLogix profiles stored on the storage account must be assigned the Storage File Data SMB Share Contributor role. Users signing in to the Azure Virtual Desktop session hosts need access permissions to access your file share. Granting access to an Azure File share involves configuring permissions both at the share level as well as on the NTFS level, similar to a traditional Windows share. To configure share level permissions, assign each user a role with the appropriate access permissions. Permissions can be assigned to either individual users or an Azure AD group. Reference: https://docs.microsoft.com/en-us/azure/virtual-desktop/create-fslogix-profile-container https://docs.microsoft.com/en-us/azure/azure-netapp-files/create-active-directory-connections https://docs.microsoft.com/en-us/azure/virtual-desktop/create-file-share
