시험덤프
매달, 우리는 1000명 이상의 사람들이 시험 준비를 잘하고 시험을 잘 통과할 수 있도록 도와줍니다.
  / AZ-140 덤프  / AZ-140 문제 연습

Microsoft AZ-140 시험

Configuring and Operating Windows Virtual Desktop on Microsoft Azure 온라인 연습

최종 업데이트 시간: 2025년08월07일

당신은 온라인 연습 문제를 통해 Microsoft AZ-140 시험지식에 대해 자신이 어떻게 알고 있는지 파악한 후 시험 참가 신청 여부를 결정할 수 있다.

시험을 100% 합격하고 시험 준비 시간을 35% 절약하기를 바라며 AZ-140 덤프 (최신 실제 시험 문제)를 사용 선택하여 현재 최신 53개의 시험 문제와 답을 포함하십시오.

 / 9

Question No : 1


You have a Azure Virtual Desktop deployment that contains multiple host pools.
You need to create a PowerShell script to sign users out of a specific session host before you perform a maintenance task.
Which PowerShell module should you load in the script?

정답:
Explanation:
Reference:
https://docs.microsoft.com/en-us/powershell/module/az.desktopvirtualization/?view=azps-6.6.0#desktopvirtualization
https://techgenix.com/logging-off-and-removing-wvd-user-sessions/

Question No : 2


You have a Azure Virtual Desktop deployment.
You need to monitor the deployment of using the Azure Virtual Desktop Insights solution in Azure Monitor.
What should you use as the Diagnostic settings destination for the host pool?

정답:
Explanation:
Reference: https://docs.microsoft.com/en-us/azure/virtual-desktop/azure-monitor

Question No : 3


You have a Azure Virtual Desktop deployment.
In Azure Advisor, you discover the following recommendation related to Azure Virtual Desktop:
• Impact Medium
• Description: No validation environment enabled
• Potential Benefit Ensure business continuity through AVD service deployments
• Impacted Resource:' Host Pool
What can you validate by implementing the recommendations?

정답:
Explanation:
Azure Advisor is a personalized cloud consultant that helps you follow best practices to optimize your Azure deployments. When it recommends enabling a validation environment for Azure Virtual Desktop (AVD), it's referring to setting up an environment where you can test out new features, updates, or changes before rolling them out to your production environment.
The option that best matches the description of ensuring business continuity through AVD service deployments by enabling a validation environment would be:
C. Preview features for Azure Virtual Desktop
This is because a validation environment is commonly used to assess new features or updates in a non-production environment to ensure that they do not disrupt the service when implemented in production. This helps maintain business continuity by preventing untested changes from affecting end-users. It's not specifically for testing capacity, security settings, or Azure Site Recovery failover, although those could also benefit indirectly from having a validation environment.

Question No : 4


You have a Azure Virtual Desktop host pool in the East US region.
You need to implement a disaster recovery solution that meets the following requirements:
• If users cannot connect to the Azure Virtual Desktop resources in the East US region, the users must be able to connect to the equivalent resources in the West US region.
• Users must connect to the Azure Virtual Desktop resources in either the East US or the West US region by selecting a single icon in the Remote Desktop client
• In the event of a disaster, failover between the Azure regions must be initiated manually by an administrator.
• Failover times must be minimized.
What should you do?

정답:
Explanation:
Reference: https://docs.microsoft.com/en-us/azure/virtual-desktop/disaster-recovery

Question No : 5


Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Virtual Desktop host pool that runs Windows 10 Enterprise multi-session.
User sessions are load-balanced between the session hosts. Idle session timeout is 30 minutes.
You plan to shut down a session host named Host1 to perform routine maintenance.
You need to prevent new user sessions to Host1 without disconnecting active user sessions.
Solution: From the host pool, you remove Host1 from the session host list.
Does this meet the goal?

정답:
Explanation:
Reference: https://docs.microsoft.com/en-us/azure/virtual-desktop/drain-mode

Question No : 6


Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Virtual Desktop host pool that runs Windows 10 Enterprise multi-session.
User sessions are load-balanced between the session hosts. Idle session timeout is 30 minutes.
You plan to shut down a session host named Host1 to perform routine maintenance.
You need to prevent new user sessions to Host1 without disconnecting active user sessions.
Solution: From the properties of the virtual machine of Host1, you enable just-in-time (JIT) VM access.
Does this meet the goal?

정답:
Explanation:
Reference: https://docs.microsoft.com/en-us/azure/virtual-desktop/drain-mode

Question No : 7


Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Virtual Desktop host pool that runs Windows 10 Enterprise multi-session.
User sessions are load-balanced between the session hosts. Idle session timeout is 30 minutes.
You plan to shut down a session host named Host1 to perform routine maintenance.
You need to prevent new user sessions to Host1 without disconnecting active user sessions.
Solution: you change the Drain mode of Host1.
Does this meet the goal?

정답:
Explanation:
Reference: https://docs.microsoft.com/en-us/azure/virtual-desktop/drain-mode

Question No : 8


You have an Azure Virtual Desktop host pool in the US East Azure region.
You need to ensure that the host pool can fail over to the US West Azure region.
What should you do first?

정답:
Explanation:
Ensuring that an Azure Virtual Desktop (AVD) host pool can fail over to another region is a multi-step process. The first step in creating a disaster recovery plan for AVD involves setting up infrastructure in the secondary region that can support the AVD deployment when the primary region is not available. This typically includes creating a new host pool in the secondary region.
Here's why creating a new host pool is the first step:
A. Create a Recovery Services vault: While a Recovery Services vault is used for backing up virtual machines, it's not the first step for AVD failover because AVD uses host pools, not individual VM backups, to manage desktops and apps.
B. Create a virtual machine snapshot of each session host: This would capture the state of each VM but does not address the AVD-specific configuration or the regional aspect of failover.
C. Create an Azure Storage account that uses geo-redundant storage (GRS): While having GRS is important for data resiliency, it does not directly enable the AVD deployment to failover. GRS ensures that the data is replicated in a secondary region, but it does not provision the necessary AVD infrastructure in that region.
D. Create a new host pool: This is the first step toward establishing a failover capability because it sets up the necessary AVD infrastructure in the secondary region. Once the new host pool is created in the US West region, you can configure it with the appropriate images, session hosts, and network settings to match the primary deployment. Afterward, you can use Azure Site Recovery or manual processes to handle the replication of user profile data and other necessary components.
Therefore, the correct action to take first is:
D. Create a new host pool in the US West Azure region.

Question No : 9


You have an Azure Virtual Desktop deployment.
You use the Start/Stop VMs during off-hours feature in Azure.
You need to configure which virtual machines must never be stopped by the solution.
What should you configure?

정답:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/automation/automation-solution-vm-management
https://docs.microsoft.com/en-us/azure/automation/automation-solution-vm-management-enable

Question No : 10


You have an Azure Virtual Desktop deployment.
You deploy and configure Azure Virtual Desktop in a secondary location.
You plan to perform a test failover to the secondary location, but discover existing user sessions to the primary location.
You need to sign out users from the session hosts in the primary location.
Which PowerShell cmdlet should you run?

정답:
Explanation:
To sign out users from the session hosts in an Azure Virtual Desktop environment, you would use the cmdlet that is designed to log off user sessions from the session hosts.
The cmdlet that fits this description is:
A. Invoke-RdsUserSessionLogoff
This cmdlet allows you to log off a user session on a session host in a specific host pool. It is part of the PowerShell module for Azure Virtual Desktop (formerly known as Remote Desktop Services - Rds).
Please note that PowerShell cmdlets can change over time, and it's important to use the most current version of the Azure Virtual Desktop PowerShell module.

Question No : 11


Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have the following:
✑ A Microsoft 365 E5 tenant
✑ An on-premises Active Directory domain
✑ A hybrid Azure Active Directory (Azure AD) tenant
✑ An Azure Active Directory Domain Services (Azure AD DS) managed domain
✑ An Azure Virtual Desktop deployment
The Azure Virtual Desktop deployment contains personal desktops that are hybrid joined to the on-premises domain and enrolled in Microsoft Intune.
You need to configure the security settings for the Microsoft Edge browsers on the personal desktops.
Solution: You configure a compliance policy in Intune.
Does this meet the goal?

정답:
Explanation:
You need to configure a Configuration Profile in Intune or use Group Policy.

Question No : 12


Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have the following:
✑ A Microsoft 365 E5 tenant
✑ An on-premises Active Directory domain
✑ A hybrid Azure Active Directory (Azure AD) tenant
✑ An Azure Active Directory Domain Services (Azure AD DS) managed domain
✑ An Azure Virtual Desktop deployment
The Azure Virtual Desktop deployment contains personal desktops that are hybrid joined to the on-premises domain and enrolled in Microsoft Intune.
You need to configure the security settings for the Microsoft Edge browsers on the personal desktops.
Solution: You configure a configuration profile in Intune.
Does this meet the goal?

정답:
Explanation:
Reference: https://docs.microsoft.com/en-us/mem/intune/fundamentals/azure-virtual-desktop

Question No : 13


Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have the following:
✑ A Microsoft 365 E5 tenant
✑ An on-premises Active Directory domain
✑ A hybrid Azure Active Directory (Azure AD) tenant
✑ An Azure Active Directory Domain Services (Azure AD DS) managed domain
✑ An Azure Virtual Desktop deployment
The Azure Virtual Desktop deployment contains personal desktops that are hybrid joined to the on-premises domain and enrolled in Microsoft Intune.
You need to configure the security settings for the Microsoft Edge browsers on the personal desktops.
Solution: You create and configure a Group Policy Object (GPO) in the on-premises domain.
Does this meet the goal?

정답:
Explanation:
Reference: https://www.compete366.com/blog-posts/eight-tips-on-how-to-manage-azure-virtual-desktop-avd/

Question No : 14


HOTSPOT
Your network contains an on-premises Active Directory domain named contoso.com that syncs to an Azure Active Directory (Azure AD) tenant.
You have an Azure subscription that contains an Azure Virtual Desktop host pool.
You create an Azure Storage account named storage1.
You need to use FSLogix profile containers in storage1 to store user profiles for a group named
Group1. The solution must use the principle of least privilege.
What should you include in the solution? To answer, select the appropriate options in the answer area.



정답:


Explanation:
Configure Azure Active Directory Domain Services (AD DS) integration./To use FSLogix profile containers in an Azure Storage account to store user profiles, you need to configure the storage account for Azure Active Directory Domain Services (AD DS) authentication. FSLogix uses SMB shares, which require proper permissions for the users to read, write, and create profiles within the file share.
Here's what should be included in the solution:
For storage1:
Join to the contoso.com domain: This is not applicable for Azure Storage as Azure Storage accounts do not join traditional Active Directory domains.
Configure a shared access signature (SAS): This is typically used for granting limited access to objects in your storage account to other clients, without exposing your account key. This is not typically used for FSLogix profiles.
Enable encryption by using customer-managed keys: This is an optional security enhancement that allows you to manage your own encryption keys, but it is not specifically required for FSLogix.
Configure Azure Active Directory Domain Services (AD DS) integration: This is required for FSLogix because it allows you to use Azure AD credentials with SMB access, which FSLogix requires to connect to the file share.
To Group1, assign the role of:
Storage Blob Data Contributor: This role is for blob data in the storage account and is not relevant for FSLogix, which uses file shares.
Storage Blob Data Reader: Similar to the above, this role is for blob storage and not relevant for FSLogix file shares.
Storage File Data SMB Share Contributor: This role allows for reading, writing, and managing SMB file shares, which is what FSLogix requires.
Storage File Data SMB Share Reader: This role only allows for reading SMB file shares, which would not be sufficient for FSLogix profiles that need to write and manage data on the file share.
The correct answers based on the principle of least privilege are:
For storage1: Configure Azure Active Directory Domain Services (AD DS) integration.
To Group1, assign the role of: Storage File Data SMB Share Contributor.
Storage File Data SMB Share Contributor.

Question No : 15


DRAG DROP
You have an Azure Virtual Desktop host pool named Pool1, an application named App1, and an Azure file share named Share1.
You need to ensure that you can publish App1 to Pool1 by using MSIX app attach.
Which four actions should you perform in sequence before you publish App1? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.



정답:


Explanation:
To publish an application to an Azure Virtual Desktop host pool using MSIX app attach, you need to create the MSIX package, ensure it's signed, and then upload it to a location accessible by the AVD session hosts. Here are the steps you would typically follow:
Generate a signing certificate: Before you can use an MSIX package, it must be signed with a certificate that the target machines trust. This certificate is used to sign the MSIX package.
Create an MSIX package: You package the application in the MSIX format. This process converts your application into a containerized package.
Upload the MSIX package to Share1: After creating the MSIX package, you upload it to the Azure file share (Share1). This location is where the AVD session hosts will access the package for MSIX app attach.
Generate an encryption certificate: If required by the environment for added security, generate an encryption certificate. However, encryption is optional and not a mandatory step for MSIX app attach.
Creating an MSIX image is not a step in the process of preparing an MSIX package for app attach. An MSIX image is typically used when you have a virtualized version of the OS, not an application.
Based on these options, the sequence of steps should be:
Generate a signing certificate.
Create an MSIX package.
Upload the MSIX package to Share1.
(Optional, based on the environment requirements) Generate an encryption certificate.
Since the "Generate an encryption certificate" step is optional and not typically a part of the standard process for MSIX app attach, it would be included as the last step if it is necessary for your specific environment. Otherwise, the first three steps are sufficient to prepare for publishing the app using MSIX app attach.

 / 9