Your network contains an on-premises Active Directory domain named contoso.com. You have an Azure subscription that contains the resources shown in the followin...


Microsoft AZ-140 Exam

Questions Number: 110 out of 185 Questions
59.46%

Question 110
Your network contains an on-premises Active Directory domain named contoso.com.
You have an Azure subscription that contains the resources shown in the following table.
AZ-140_110Q.jpg related to the Microsoft AZ-140 Exam
You need to create a share that will host FSLogix profiles for AVDPool1. The solution must meet the following requirements:
* Maximize read and write performance for the profiles.
* Control access to the SMB share by using the users and groups stored in contoso.com.
Which account should you use to host the share?



You can create FSLogix profile containers using Azure NetApp Files, an easy-to-use Azure native platform service that helps customers quickly and reliably provision enterprise-grade SMB volumes for their Azure Virtual Desktop environments.
We [Microsoft] recommend using FSLogix profile containers as a user profile solution for the Azure Virtual Desktop service. FSLogix profile containers store a complete user profile in a single container and are designed to roam profiles in non-persistent remote computing environments like Azure Virtual Desktop.
Create and manage Active Directory connections for Azure NetApp Files.
Azure NetApp Files supports both Active Directory Domain Services (AD DS) and Azure Active Directory Domain Services (AADDS) for AD connections.
Incorrect:
Not C: Not the preferred solution.
Note: You can create an Azure file share authenticated by a domain controller on an existing Azure Virtual Desktop host pool. You can use this file share to store storage profiles.
Assign Azure RBAC permissions to Azure Virtual Desktop users
All users that need to have FSLogix profiles stored on the storage account must be assigned the Storage File Data SMB Share Contributor role.
Users signing in to the Azure Virtual Desktop session hosts need access permissions to access your file share. Granting access to an Azure File share involves configuring permissions both at the share level as well as on the NTFS level, similar to a traditional Windows share.
To configure share level permissions, assign each user a role with the appropriate access permissions. Permissions can be assigned to either individual users or an Azure AD group.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-desktop/create-fslogix-profile-container
https://docs.microsoft.com/en-us/azure/azure-netapp-files/create-active-directory-connections
https://docs.microsoft.com/en-us/azure/virtual-desktop/create-file-share





Previous Questions Next Questions