You need to recommend an authentication solution that meets the performance requirements. Which two actions should you include in the recommendation? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A. Join all the session hosts to Azure AD.
B. In each Azure region that will contain the Azure Virtual Desktop session hosts, create an Azure Active Directory Domain Service (Azure AD DS) managed domain.
C. Deploy domain controllers for the on-premises Active Directory domain on Azure virtual machines to the new sites..
D. Deploy read-only domain controllers (RODCs) on Azure virtual machines to the new sites.
E. In each Azure region that will contain the Azure Virtual Desktop session hosts, create an Active Directory site.
You have an Azure Virtual Desktop deployment that contains the resources shown in the following table. You need to enable just-in-time (JIT) VM access for all the session hosts. What should you do first?
A. Deploy Azure Bastion to VNET1.
B. Assign network security groups (NSGs) to the network interfaces of the five session hosts.
C. Configure Access control (IAM) for HostPool1.
D. Assign a network security group (NSG) to Subnet1.
Question 73
HOTSPOT - You have an Azure Virtual Desktop deployment that contains the resources shown in the following table. You need to perform the following configurations: • Enable a managed identity for App1. • Enable Clipboard redirection for App1. On which resources should you perform the configurations? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Question 74
DRAG DROP - You have an Azure Virtual Desktop deployment that contains the resources shown in the following table. You have a Windows 11 device named Device1 that has Azure Command-Line Interface (CLI) installed. You need to use Remote Desktop Connection (mstsc.exe) on Device1 to connect to Host1. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Question 75
DRAG DROP - You have an Azure Virtual Desktop deployment. You plan to use a Conditional Access policy to enforce multi-factor authentication (MFA) when users connect to the deployment. The solution must meet the following requirements: • Enforce MFA when a user connects to Azure Virtual Desktop by using a subscription feed. • Enforce MFA when a user authenticates to a session host that has single sign-on (SSO) enabled. You need to identify which cloud apps to use for the Conditional Access policy. Which app should you use for each requirement? To answer, drag the appropriate apps to the correct requirements. Each app may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.
Question 76
HOTSPOT - You have an Azure Virtual Desktop deployment that has just-in-time (JIT) VM access enabled. You need to request access to a session host by using JIT VM access. Which three virtual machine settings can you use to request access? To answer, select the appropriate settings in the answer area. NOTE: Each selection is worth one point.
Question 77
You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains two session hosts named Host1 and Host2. You need to enable screen capture protection for the deployment. What should you do?
A. Configure a Group Policy setting on Host1 and Host2.
B. From RDP Properties for Pool1, disable Clipboard redirection.
C. Install an Azure virtual machine extension on Host1 and Host2.
D. From RDP Properties for Pool1, disable encoding of redirected video.
Question 78
HOTSPOT - You have an Azure Virtual Desktop host pool that contains 20 Windows 11 session hosts. You create a Windows Defender Application Control (WDAC) policy named Policy1.xml. You need to deploy Policy1.xml to the session hosts. How should you prepare the policy, and to where should you copy the policy? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Question 79
You have an Azure Virtual Desktop deployment. You publish a RemoteApp named AppVersion1. You need AppVersion1 to appear in the Remote Desktop client as Sales Contact Application. Which PowerShell cmdlet should you use?
You have an Azure Virtual Desktop deployment that contains the following: - A host pool named Pool1 - Two session hosts named Host1 and Host2 - An application group named RemoteAppGroup1 that contains a RemoteApp named App1 You need to prevent users from copying and pasting between App1 and their local device. What should you do?
A. Create an AppLocker policy.
B. Modify the locks of RemoteAppGroup1.
C. Assign the Desktop Virtualization Reader role for Pool1 to the users.
