You have a Windows Virtual Desktop host pool named Pool1 and an Azure Storage account named

Storage1.

Storage1 stores FSLogix profile containers in a share folder named share1.

You create a new group named Group1. You provide Group1 with permission to sign in to Pool1.

You need to ensure that the members of Group1 can store the FSLogix profile containers in share1.

The solution must use the principle of least privilege.

Which two privileges should you assign to Group1? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

You have a Windows Virtual Desktop host pool.

You need to install Microsoft Antimalware for Azure on the session hosts.

What should you do?

Reveal Solution Hide Solution

HOTSPOT

You have a Windows Virtual Desktop deployment.

You need to ensure that all the connections to the managed resources in the host pool require multi-factor authentication (MFA).

Which two settings should you modify in a conditional access policy? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Correct Answer:

Explanation:

In order to enforce Multi-Factor Authentication (MFA) for all connections to managed resources in a Windows Virtual Desktop host pool, you need to configure a Conditional Access Policy in Azure AD.

The two settings that should be modified in a Conditional Access Policy to accomplish this are:

Assignments -> Users and groups: You would choose ‘All users’ or a specific group of users that you want to enforce MFA on.

Access controls -> Grant: In this section, you would configure the control to ‘Grant access’ and require ‘Multi-Factor Authentication’.

You would not necessarily need to alter the ‘Cloud apps or actions’ or ‘Conditions’ unless you want to specify particular apps or conditions under which the policy applies. If you want the policy to apply to all cloud apps, you can leave it as ‘No cloud apps or actions selected’, which will enforce the policy for all apps by default. However, if you only want to apply MFA to the Windows Virtual Desktop app, you would select that specific app under the ‘Cloud apps or actions’ section.

In ‘Conditions’, you could specify certain conditions like location or device state, but this is not required just to enforce MFA; it’s more about refining the policy.

Please note that you would also need to ensure that the ‘Enable policy’ switch at the end of the configuration is set to ‘On’ for the policy to be active.

HOTSPOT

You have a Windows Virtual Desktop deployment.

You need to ensure that all the connections to the managed resources in the host pool require multi-factor authentication (MFA).

Which two settings should you modify in a conditional access policy? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Correct Answer:

Explanation:

In order to enforce Multi-Factor Authentication (MFA) for all connections to managed resources in a Windows Virtual Desktop host pool, you need to configure a Conditional Access Policy in Azure AD.

The two settings that should be modified in a Conditional Access Policy to accomplish this are:

Assignments -> Users and groups: You would choose ‘All users’ or a specific group of users that you want to enforce MFA on.

Access controls -> Grant: In this section, you would configure the control to ‘Grant access’ and require ‘Multi-Factor Authentication’.

You would not necessarily need to alter the ‘Cloud apps or actions’ or ‘Conditions’ unless you want to specify particular apps or conditions under which the policy applies. If you want the policy to apply to all cloud apps, you can leave it as ‘No cloud apps or actions selected’, which will enforce the policy for all apps by default. However, if you only want to apply MFA to the Windows Virtual Desktop app, you would select that specific app under the ‘Cloud apps or actions’ section.

In ‘Conditions’, you could specify certain conditions like location or device state, but this is not required just to enforce MFA; it’s more about refining the policy.

Please note that you would also need to ensure that the ‘Enable policy’ switch at the end of the configuration is set to ‘On’ for the policy to be active.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a W indows Virtual Desktop host pool named Pool1 that is integrated with an Azure Active Directory Domain Services (Azure AD DS) managed domain.

You need to configure idle session timeout settings for users that connect to the session hosts in Pool1.

Solution: From an Azure AD DS-joined computer, you modify the AADDC Computer GPO settings.

Does that meet the goal?

Reveal Solution Hide Solution

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a Windows Virtual Desktop host pool named Pool1 that is integrated with an Azure Active Directory Domain Services (Azure AD DS) managed domain.

You need to configure idle session timeout settings for users that connect to the session hosts in Pool1.

Solution: From an Azure AD DS-joined computer, you modify the AADDC Computers GPO settings.

Does that meet the goal?

Reveal Solution Hide Solution

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a Windows Virtual Desktop host pool named Pool1 that is integrated with an Azure Active Directory Domain Services (Azure AD DS) managed domain.

You need to configure idle session timeout settings for users that connect to the session hosts in Pool1.

Solution: From the Azure portal, you modify the Session behavior settings in the RDP Properties of Pool1.

Does that meet the goal?

Reveal Solution Hide Solution

You have a Windows Virtual Desktop deployment.

You publish a RemoteApp named AppVersion1.

You need AppVersion1 to appear in the Remote Desktop client as Sales Contact Application.

Which PowerShell cmdlet should you use?

Reveal Solution Hide Solution

You have a Windows Virtual Desktop deployment that contains the following:

✑ A host pool named Pool1

✑ Two session hosts named Host1 and Host2

✑ An application group named RemoteAppGroup1 that contains a RemoteApp named App1

You need to prevent users from copying and pasting between App1 and their local device.

What should you do?

Reveal Solution Hide Solution

You have a Windows Virtual Desktop deployment that contains the following:

✑ A host pool named Pool1

✑ Two session hosts named Host1 and Host2

✑ An application group named RemoteAppGroup1 that contains a RemoteApp named App1

You need to prevent users from copying and pasting between App1 and their local device.

What should you do?

Reveal Solution Hide Solution