View AZ-140 Exam Questions

Q: 11

DRAG DROP You have a Windows Virtual Desktop deployment. You have a session host named Host1 that has the disk layout shown in the exhibit. (Click the Exhibit tab.) You plan to deploy an app that must be installed on D. The app requires 500 GB of disk space. You need to add a new data disk that will be assigned the drive letter D. The solution must maintain the current performance of Host1. Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Drag & Drop

Enable JavaScript to use the Drag & Drop feature.

Move the page file to drive C.
Move the page file to Temporary Storage.
Change the drive letter of Temporary Storage (D:).
Mark Temporary Storage (D:) as Active.
Add the new disk and assign drive D.
Move the page file to System Reserved.

Correct Answer:

Answer Area Bucket 1: A. Move the page file to drive C. Bucket 2: C. Change the drive letter of Temporary Storage (D:). Bucket 3: E. Add the new disk and assign drive D. Bucket 4: B. Move the page file to Temporary Storage.

Explanation

The question requires adding a new 500 GB disk as drive D:, which is currently assigned to the 7 GB temporary disk. The temporary disk also holds the page file, which is critical for performance.

To change the drive letter of the temporary disk, the page file must first be moved. The only viable option is drive C:.
Once the page file is moved (and the system rebooted, which is implied), the temporary disk's letter can be changed from D: to something else (e.g., T:).
With the D: letter now free, the new 500 GB disk can be added and assigned drive letter D:.
To "maintain the current performance," the page file must be moved back to the fast, local temporary disk (which now has a new drive letter). The action "Move the page file to Temporary Storage" refers to this disk, not the new D: drive.

References

Microsoft Azure Documentation (learn.microsoft.com): Temporary disk on Azure VMs

Reference: This official documentation explains the purpose of the temporary disk (often D:) on Azure Virtual Machines, which are used for AVD session hosts. It states, "The temporary disk is primarily used for the page file (pagefile.sys)."

Section: "Best practices" and "Temporary disk"

Explanation: This source confirms the disk D: shown in the exhibit is the temporary disk and its intended use is for the page file to ensure optimal performance.

Microsoft Azure Documentation (learn.microsoft.com): Change the drive letter of the Windows temporary disk

Reference: This document provides the exact procedure for this scenario.

Section: "Steps to change the temporary disk drive letter"

Explanation: The official steps are: 1. Move the page file to the OS disk (C:). 2. Reboot the VM. 3. Change the drive letter of the temporary disk (D:). 4. Attach the new data disk and assign it D:. 5. (Recommended) Move the page file back to the temporary disk. This directly maps to the four correct actions in the solution.

Q: 12

DRAG DROP You have an Azure Virtual Desktop deployment. You plan to create a new host pool that meets the following requirements: • Supports up to 25 user connections • Contains 10 Windows 11 multi-session hosts • Evenly distributes user sessions across the session hosts You need to recommend which type of host pool and load-balancing algorithm to use. What should you recommend? To answer, drag the appropriate options to the correct targets. Each option may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Drag & Drop

Enable JavaScript to use the Drag & Drop feature.

Automatic
Breadth-first
Depth-first
Direct
Personal
Pooled

Q: 13

HOTSPOT - You have an Azure Virtual Desktop deployment that contains the resources shown in the following table. You need to perform the following configurations: • Enable a managed identity for App1. • Enable Clipboard redirection for App1. On which resources should you perform the configurations? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Your Answer

Correct Answer:

MANAGED IDENTITY: HOST1 AND HOST2

CLIPBOARD REDIRECTION: POOL1

Explanation

Managed identity: A managed identity provides an identity for applications to use when connecting to resources that support Azure AD authentication. In this scenario, App1 is an application that runs on the session host virtual machines (Host1 and Host2). Therefore, to allow App1 to use this capability, the managed identity must be enabled on the session host virtual machines themselves.
Clipboard redirection: Clipboard redirection is a Remote Desktop Protocol (RDP) feature. In Azure Virtual Desktop, RDP properties (which control features like clipboard, drive, and printer redirection) are configured at the Host Pool level. Applying this setting to Pool1 will enable clipboard redirection for all sessions on the hosts within that pool, including sessions running App1.

References

Managed identity:

Microsoft Learn. (n.d.). Enable managed identities for session hosts. Retrieved November 13, 2025, from https://learn.microsoft.com/en-us/azure/virtual-desktop/managed-identities-session-hosts

Reference (Section): "Enable managed identities on session hosts" documentation states, "You can enable system-assigned or user-assigned managed identities on your Azure Virtual Desktop session host virtual machines (VMs)..." This confirms the identity is a property of the VM (Host1, Host2).

Clipboard redirection:

Microsoft Learn. (n.d.). Supported RDP properties with Azure Virtual Desktop. Retrieved November 13, 2025, from https://learn.microsoft.com/en-us/azure/virtual-desktop/rdp-properties

Reference (Section): The introduction states, "You can configure the RDP properties for a host pool..." The table under "Device redirection" lists redirectclipboard:i:value as a configurable property, confirming this setting is applied to the host pool (Pool1).

Q: 14

HOTSPOT You have an Azure Virtual Desktop deployment that contains a host pool named HostPool1. You plan to deploy session hosts to HostPool1 as shown in the following table.

Each session host must support up to 15 concurrent users. You need to recommend which operating system version to deploy from Azure Marketplace to the session hosts. What should you recommend for each session host? To answer, select the appropriate options in the answer area.

Your Answer

Q: 15

HOTSPOT - You have an Azure Virtual Desktop deployment and two Azure Active Directory groups named Group1 and Group2. You create two Conditional Access policies named Policy1 and Policy2. Policy1 is assigned to Group1. Policy2 is assigned to Group2. Both policies include Azure Virtual Desktop as a cloud app. You need to meet the following requirements: • The users in Group1 must be prompted for multi-factor authentication (MFA) when they connect to Azure Virtual Desktop. • The users in Group2 must reauthenticate every eight hours while they are connected to Azure Virtual Desktop. Which settings should you configure in Policy1 and Policy2? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Your Answer

Correct Answer:

POLICY1:ACCESS CONTROLS: GRANT

POLICY2:ACCESS CONTROLS: SESSION

Explanation

To fulfill the requirements, the policies must be configured as follows:

Policy1: The requirement is to prompt users for multi-factor authentication (MFA). In an Azure Conditional Access policy, MFA is an "access control" that must be satisfied before access is granted. Therefore, the administrator must configure the Access controls: Grant blade and select "Require multi-factor authentication."
Policy2: The requirement is to force reauthentication every eight hours. This is a control that governs the user's session after the initial sign-in. This setting, known as "Sign-in frequency," is configured within the Access controls: Session blade.

The "Sign-in risk" and "User risk" options are conditions (inputs) that can trigger a policy, not the actions (outputs) required by the scenario.

References

Microsoft Learn (Azure Active Directory documentation). "Conditional Access: Grant."

Section: "Require multi-factor authentication"

Content: This document confirms that enforcing MFA is a "Grant" control. It states, "Administrators can choose to require multi-factor authentication... to access the selected cloud apps." This directly supports the answer for Policy1.

Microsoft Learn (Azure Active Directory documentation). "Conditional Access: Session."

Section: "Sign-in frequency"

Content: This document explains that session lifetime controls are managed under the "Session" blade. It specifies, "Sign-in frequency (SIF) defines the time period before a user is asked to sign in again when attempting to access a resource." This directly supports the 8-hour reauthentication requirement for Policy2.

Microsoft Learn (Azure Virtual Desktop documentation). "Set up multi-factor authentication for Azure Virtual Desktop."

Section: "Create a Conditional Access policy"

Content: This official AVD guide explicitly instructs: "Under Access controls > Grant, select Grant access, then select Require multi-factor authentication." This verifies the correct configuration for Policy1 specifically for the Azure Virtual Desktop application.

Q: 16

HOTSPOT You have an Azure Virtual Desktop host pool that contains 20 Windows 11 session hosts. You create a Windows Defender Application Control (WDAC) policy named Policy 1.xml. You need to deploy PolicyLxm1 to the session hosts. How should you prepare the policy, and to where should you copy the policy? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Your Answer

Q: 17

HOTSPOT You have an Azure Compute Gallery that contains the virtual machine image definitions shown in the following table.

You create a new Azure virtual machine named VM1 as shown in the following table.

You need to prepare VM1, and then capture and share VM1 to the Azure Compute Gallery. The solution must minimize administrative effort. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Your Answer

Q: 18

HOTSPOT You have an Azure subscription that contains a user named User1 and an Azure Virtual Desktop host pool named Pool1. Pool1 contains the session hosts shown in the following table.

You have the devices shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Your Answer

Q: 19

HOTSPOT Which type of host pool and load balancing algorithm should you configure to meet the performance requirements? To answer, select the appropriate options in The answer area. NOTE: Each correct selection is worth one point.

Your Answer

Q: 20

HOTSPOT You have an Azure Virtual Desktop deployment that contains a host pool named Pooll. Pool1 contains five session hosts joined to an Active Directory Domain Services {AD DS) domain. You plan to use the Azure portal to add additional session hosts and specify a custom configuration. Which type of custom configuration should you use. and where should you store the custom configuration? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Your Answer

Question 11 of 20 · Page 2 / 2

Premium Access Includes

✓ Quiz Simulator
✓ Exam Mode
✓ Progress Tracking
✓ Question Saving
✓ Flash Cards
✓ Drag & Drops
✓ 3 Months Access
✓ PDF Downloads

Get Premium Access

Premium Access Includes

FLASH OFFER

avail 10% DISCOUNT on YOUR PURCHASE