You have an Azure Virtual Desktop deployment.
Many users have iOS devices that have the Remote Desktop Mobile app installed.
You need to ensure that the users can connect to the feed URL by using email discovery instead of entering the feed URL manually.
How should you configure the _msradc DNS record? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Explanation
Record type: email discovery uses a TXT record named _msradc in the users' email domain, whose text holds the feed URL; A, CNAME and SRV records cannot carry a URL string for the client to read. Record value: for Azure Virtual Desktop (the Azure Resource Manager-based service) the feed discovery URL is https://rdweb.wvd.microsoft.com/api/arm/feeddiscovery. The path ending in api/feeddiscovery/webfeeddiscovery.aspx belongs to Azure Virtual Desktop (classic), and Feed/webfeed.aspx is the on-premises RD Web feed format, so neither points clients to the current service.
You have a Microsoft Entra tenant named contoso.com and an Azure virtual network named VNET1.
To VNET1, you deploy a Microsoft Entra Domain Services managed domain named litwareinc.com.
To VNET1, you plan to deploy an Azure Virtual Desktop host pool named Pool1.
You need to ensure that you can deploy Windows 10 Enterprise session hosts to Pool1.
What should you do first?
A.Modify the settings of the litwareinc.com DNS zone.
B.Modify the DNS settings of VNET1.Correct
C.Add a custom domain name to contoso.com.
D.Implement Microsoft Entra Connect cloud sync.
Explanation
Session hosts must join the managed domain during deployment, and they can only find its domain controllers if the virtual network's DNS servers point to the two IP addresses of the Domain Services managed domain. Updating VNET1's DNS server settings is therefore the first required configuration step after the managed domain is deployed. The managed domain's DNS zone does not need changes, the managed domain name does not have to be a verified custom domain in the tenant, and cloud sync is not supported with Domain Services (synchronization from Entra ID to the managed domain is automatic).
You have the devices shown in the following table.
| Name | Operating system |
|---|---|
| Device1 | Windows 10 Home |
| Device2 | Windows 8.1 Professional |
| Device3 | Windows 10 IoT Enterprise |
You plan to deploy Azure Virtual Desktop for client access to remote virtualized apps.
Which devices support the Windows Remote Desktop client (Windows App)?
A.Device1 and Device2 only
B.Device1 and Device3 onlyCorrect
C.Device1, Device2, and Device3
D.Device1 only
Explanation
The Windows client for Azure Virtual Desktop supports Windows 10 and Windows 11 (plus Windows Server 2016 and later), and every Windows 10 edition, including Home and IoT Enterprise, qualifies. Windows 8.1 is not a supported client operating system, so Device2 cannot run the client. That rules out every option that includes Device2 and leaves Device1 and Device3.
You plan to deploy Azure Virtual Desktop.
Users have the devices shown in the following table.
| Type | Platform |
|---|---|
| Tablet | Windows 10 Pro |
| Phone | Android |
| Laptop | macOS |
From which device types can the users connect to Azure Virtual Desktop resources by using an installed client app (Windows App, formerly the Remote Desktop client) and by using the web client (Windows App in a web browser, formerly the Remote Desktop web client)?
To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Explanation
Client app: an installed client is available for Windows, macOS, iOS/iPadOS and Android, so the Windows 10 Pro tablet, the Android phone and the macOS laptop can all connect. Web client: the supported browsers run on Windows, macOS, Linux and ChromeOS, and mobile web browsers are explicitly not supported. The Windows tablet and the macOS laptop can use the web client, but the Android phone must use the installed app instead.
You have an Azure Virtual Desktop deployment.
You plan to create the host pools shown in the following table.
| Name | Requirement |
|---|---|
| Pool1 | Will be directly assigned to users in the graphics department at your company<br>Will run heavy graphic rendering and compute-intensive applications<br>Must support premium storage |
| Pool2 | Pooled virtual machines for approximately 10 users<br>Will run Microsoft Office 365 apps<br>Will require calling and meeting features in Microsoft Teams<br>Must support premium storage |
You need to recommend the virtual machine size for each host pool. The solution must minimize costs.
Which size should you recommend for each pool? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Explanation
Pool1: heavy graphic rendering needs a GPU-accelerated size, and the NV family is the GPU family built for graphics and virtual workstations, so NVv3 is the only offered size that meets the requirement. Note that NVv3 was retired on September 30, 2026, and Microsoft now recommends the NVadsA10 v5-series for the same workload. Pool2: Office apps and Teams calling and meetings (with Teams media optimization offloading audio and video to the client) run well on a general-purpose size without a GPU, so the cheaper Dsv4-series is enough. The Av2-series is cheaper still but does not support premium storage, and NVv3 would add unnecessary GPU cost.
You plan to deploy Azure Virtual Desktop to meet the department requirements shown in the following table.
| Department | Required Azure Virtual Desktop resource | Number of users | GPU required |
|---|---|---|---|
| Research | Single-session desktop | 10 | No |
| Engineering | Multi-session desktop | 50 | Yes |
| IT | Multi-session desktop | 50 | No |
| Finance | RemoteApp | 10 | No |
You plan to use Azure Virtual Desktop host pools with load balancing and autoscaling.
You need to recommend a host pool design that meets the requirements. The solution must minimize costs.
What is the minimum number of host pools you should recommend?
A.1
B.2
C.3Correct
D.4
Explanation
All session hosts in a host pool should share the same image and size, so Research (single-session desktops), Engineering (multi-session hosts with a GPU) and IT (multi-session hosts without a GPU) each need different session hosts. Finance does not need its own pool: a pooled host pool can have a desktop application group and RemoteApp application groups at the same time, so Finance's RemoteApp group can be added to the IT multi-session pool. That gives three host pools; four would be needed only if RemoteApp required a separate pool, which it does not.
Your company has a main office and two branch offices. Each office connects directly to the internet. The router in each branch office is configured as an endpoint for the following VPNs:
- A VPN connection to the main office
- A site-to-site VPN to Azure
The routers in each branch office have the Quality of Service (QoS) rules shown in the following table.
| Name | Destination | Available bandwidth allocated |
|---|---|---|
| Rule1 | VPN traffic to the main office | 25% |
| Rule2 | Site-to-site VPN traffic to Azure | 25% |
| Rule3 | HTTP/HTTPS traffic to all Azure and Microsoft 365 public IP addresses | 25% |
| Rule4 | Traffic to non-Microsoft internet addresses | 25% |
Users in the branch office report slow responses and connection errors when they attempt to connect to Azure Virtual Desktop resources.
You need to modify the QoS rules on the branch office routers to improve Azure Virtual Desktop performance.
For which rule should you increase the bandwidth allocation?
A.Rule2
B.Rule3Correct
C.Rule4
D.Rule1
Explanation
Azure Virtual Desktop clients do not connect to session hosts over the site-to-site VPN; they establish a reverse connection to the Azure Virtual Desktop service's public endpoints over TCP port 443, so the traffic matches the HTTPS-to-Azure rule. Increasing Rule3's bandwidth therefore helps the sessions. Rule2 carries only private VPN traffic to the virtual network, which client connections do not use, and Rule1 and Rule4 cover unrelated destinations.
You plan to deploy Azure Virtual Desktop. The deployment will use existing virtual machines.
You create an Azure Virtual Desktop host pool.
You need to ensure that you can add the virtual machines to the host pool.
What should you do first?
A.Register the Microsoft.DesktopVirtualization provider.
B.Generate a registration key.Correct
C.Run the Invoke-AzVMRunCommand cmdlet.
D.Create a role assignment.
Explanation
To add existing virtual machines as session hosts, you first generate a registration key for the host pool, then install the Azure Virtual Desktop Agent on each VM and supply that key, followed by the Agent Boot Loader. The Microsoft.DesktopVirtualization resource provider must already be registered because the host pool exists. Invoke-AzVMRunCommand is just a way to run scripts on a VM and does not authorize registration, and a role assignment grants permissions to people but is not the step that lets the VMs register with the pool.
You are designing an Azure Virtual Desktop deployment.
You identify the network latency between the locations where users reside and the planned deployment.
What should you use to identify the best Azure region to deploy the host pool?
The Azure Virtual Desktop Experience Estimator collects round-trip time (RTT) samples from the client's location to Azure regions, so you can place session hosts in the region with the lowest RTT for your users. Azure Traffic Manager is a DNS-based load balancer for endpoints you already have, not a planning tool for region latency. Azure Monitor for Azure Virtual Desktop (Azure Virtual Desktop Insights) measures connection quality of an existing deployment, and Azure Advisor gives recommendations for deployed resources, so neither helps choose a region before deployment. Current product documentation also points to the Azure network round-trip latency statistics for the same purpose.
You have an Azure Virtual Desktop host pool named Pool1 in the East US region.
You have a storage account named storage1 that contains FSLogix profile containers. In the East US region, you have an Azure Compute Gallery (formerly shared image gallery) named SIG1 that contains a virtual machine image named Image1. Image1 is used to create new session hosts in Pool1.
You plan to deploy a new Azure Virtual Desktop host pool named Pool2 to the South India region.
You need to implement a session host deployment solution for Pool2 that meets the following requirements:
- Image1 must replicate in the South India region.
- The session hosts in Pool2 must be based on Image1.
- Changes to Image1 must be available in the South India and East US regions.
What should you include in the solution?
A.Create a new Azure Compute Gallery named SIG2 in the South India region. Upload a copy of Image1 to SIG2.
B.Create a new Azure Storage account named storage2 in the South India region. Copy Image1 to a shared folder in storage2.
C.From SIG1, update the replication for the latest image version of Image1.Correct
D.Configure geo-redundant storage (GRS) replication for storage1. Copy the VHD file of Image1 to the FSLogix profile container.
Explanation
An Azure Compute Gallery replicates each image version to the target regions you choose, so adding South India to the replication of Image1's latest version in SIG1 makes the image available there while keeping one managed source. New versions published to SIG1 can then be replicated to both East US and South India. A separate gallery with a copied image would diverge from Image1 and need manual syncing, and copying the image to a file share or an FSLogix profile storage account does not make it a deployable gallery image.
You have an on-premises network.
All users have computers that run Windows 10 Pro.
You plan to deploy Azure Virtual Desktop to meet the department requirements shown in the following table.
| Department | Requirement |
|---|---|
| Research | Run an application that can run only on Windows Server. The application will be published as a RemoteApp. |
| Finance | Run Windows 10 Enterprise multi-session. |
You need to recommend licenses for the departments. The solution must minimize costs.
Which license should you recommend for each department?
Explanation
Research: the application runs only on Windows Server, so the session hosts must run Windows Server, and Azure Virtual Desktop access to Windows Server session hosts is licensed with a Remote Desktop Services CAL with Software Assurance. A plain Windows Server CAL does not grant remote desktop access, and Windows or Microsoft 365 licenses only cover Windows client session hosts.
Finance: Windows 10 Enterprise multi-session is covered by Microsoft 365 E3 or Windows Enterprise E3, among others. Windows 10 Enterprise E3 is the cheaper of the two because it does not include the Office and other Microsoft 365 services, so it meets the cost requirement.
Your company has 60,000 users.
You plan to deploy Azure Virtual Desktop.
You need to recommend a storage solution for the FSLogix profile containers. The solution must provide the highest possible IOPS and the lowest latency desktop experience.
What should you recommend?
A.Azure Data Lake Storage
B.Azure NetApp FilesCorrect
C.Azure Blob Storage Premium
D.Azure Files Standard
Explanation
Azure NetApp Files is the FSLogix profile storage option with the highest performance tier, offering very high IOPS and sub-millisecond latency, and it scales to large enterprise deployments such as tens of thousands of users. Azure Files Standard uses HDD-backed storage with lower IOPS and higher latency. Azure Data Lake Storage and Blob Storage do not provide the SMB file shares that FSLogix profile containers need.
Your company has a single office and has 40 employees.
You are planning an Azure Virtual Desktop deployment. The estimated user workloads are shown in the following table.
| Workload type | Number of users | Bandwidth per session |
|---|---|---|
| Light | 20 | 1.5 Mbps |
| Medium | 10 | 3 Mbps |
| Heavy | 10 | 5 Mbps |
Half the users of each workload type work from home. All the users who work from home do NOT establish a VPN connection to the office.
Approximately how much bandwidth is needed between the office and Azure to support the planned workloads?
A.9.5 Mbps
B.55 MbpsCorrect
C.110 Mbps
D.220 Mbps
Explanation
Only the users who work in the office use the office link to Azure, which is half of each workload type: 10 light users x 1.5 Mbps = 15 Mbps, 5 medium users x 3 Mbps = 15 Mbps, and 5 heavy users x 5 Mbps = 25 Mbps, for a total of 55 Mbps. 110 Mbps is the total for all 40 users, which wrongly includes home users who connect directly over the internet without a VPN. 9.5 Mbps is just the sum of the per-session rates.
Your network contains an on-premises Active Directory domain that syncs to a Microsoft Entra tenant. The domain contains the domain controllers shown in the following table.
| Name | Network location | IP address | Configuration |
|---|---|---|---|
| Server1 | On-premises datacenter | 10.10.1.1 | Domain controller, DNS server |
| Server2 | Azure virtual network named VNET1 | 10.20.1.1 | Domain controller, DNS server |
The DNS servers are configured to forward requests to an external DNS service.
You create a new virtual network named VNET2 that is peered to VNET1 and has gateway transit enabled.
You plan to implement an Azure Virtual Desktop host pool in VNET2. The session hosts will be joined to the Active Directory domain.
You need to configure DNS to meet the following requirements:
- Ensure that Azure Virtual Desktop users can resolve on-premises servers and Azure resources.
- Ensure that Azure Virtual Desktop remains operational if a DNS server fails.
- Minimize administrative effort.
What should you configure?
A.the DNS settings of VNET2 to use Server2 and Server1Correct
B.the DNS settings of VNET2 to use the Azure DNS service
C.the DNS settings of the virtual machines to use Server2 and Server1
D.the DNS settings of the virtual machines to use the Azure DNS service
Explanation
Domain-joined session hosts must use the AD DS DNS servers to locate domain controllers and resolve on-premises names, and those servers forward other queries externally. Setting custom DNS servers on VNET2 applies them to every session host automatically through DHCP, and listing both Server2 and Server1 keeps resolution working if one fails. Setting DNS on each virtual machine works but adds administrative effort, and Azure-provided DNS cannot resolve the on-premises Active Directory zone, so domain join would fail.
You have an Azure subscription that contains a hybrid Microsoft Entra tenant and two domain-joined Azure virtual machines. The virtual machines run Windows Server 2019 and contain managed disks.
You plan to deploy an Azure Virtual Desktop host pool that will use a Storage Spaces Direct Scale-Out File Server to host user profiles.
You need to ensure that the virtual machines can host the Storage Spaces Direct deployment. The solution must meet the following requirements:
- Ensure that the user profiles are available if a single server fails.
- Minimize administrative effort.
What should you do?
Explanation
On each virtual machine, install: Storage Spaces Direct and a Scale-Out File Server run on a Windows Server failover cluster, so every node needs the Failover Clustering feature. File Server Resource Manager handles quotas and file screening and the Remote Desktop Services role is for session hosts; neither is needed for Storage Spaces Direct.
Create: a two-node cluster needs a witness to keep quorum when one node fails, and a cloud witness stored in an Azure storage account is the simplest option in Azure. A third virtual machine as a file share witness adds more to manage, shared disks are not used because Storage Spaces Direct pools each node's local managed disks, and an Azure NetApp Files share would replace Storage Spaces Direct rather than support it.
You have the Azure Virtual Desktop deployment shown in the following table.
| Configuration | Value |
|---|---|
| Azure region | West US |
| Number of currently deployed virtual machines | 5 |
| Virtual machine size | D8s_v3 |
| Number of total regional vCPUs | 80% (40 of 50) |
You plan to deploy a new host pool as shown in the following table.
| Configuration | Value |
|---|---|
| Azure region | West US |
| Number of session hosts | 4 |
| Virtual machine size | D8s_v3 |
You need to ensure that you can deploy the host pool.
What should you do?
A.Add a lock to the existing host pool.
B.Stop and deallocate one of the currently deployed virtual machines.
C.Submit a support request for service and subscription limits.Correct
D.Change the proposed virtual machine size for the session hosts to D4s_v3.
Explanation
The subscription uses 40 of its 50 regional vCPUs, leaving 10, while four D8s_v3 session hosts need 32 vCPUs, so the regional vCPU quota must be raised through a quota (service and subscription limits) request. Deallocating one D8s_v3 frees only 8 vCPUs (18 available), and switching to D4s_v3 still needs 16 vCPUs, so neither is enough. A resource lock has no effect on quota.
You have an Azure subscription that contains 500 users. The users are assigned Microsoft Office 365 E1 licenses.
You deploy an Azure Virtual Desktop solution that contains Windows 10 multi-session hosts and streams a custom remote app named App1.
You need to ensure that the users are licensed to stream App1. The solution must minimize costs.
Which license should you use?
Access to Windows 10 or Windows 11 Enterprise multi-session session hosts for internal users is granted by Microsoft 365 E3/E5/A3/A5/F3/Business Premium, Windows Enterprise E3/E5, Windows Education A3/A5 or Windows VDA per user. Of the options, Windows 10 Enterprise E3 is the cheapest eligible license. Microsoft 365 E5 also qualifies but costs far more, Office 365 E3 (like the existing E1) does not include a Windows entitlement, and an RDS CAL only licenses Windows Server session hosts.
You have an Azure subscription that contains a virtual machine named VM1. VM1 runs a customized version of Windows 10 Enterprise.
You generalize the operating system on VM1 and shut down the virtual machine.
You need to deploy additional virtual machines based on an image of VM1 by using the Azure portal.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Explanation
VMs are created from an image version, which lives under an image definition inside an Azure Compute Gallery, so you create the gallery first, then the image definition (Windows, generalized), then the image version. A VM, generalized or specialized, can be used directly as the image version's source, so there is no need to generate a snapshot first. Backing up VM1 does not produce a deployable image, and a gallery and definition without an image version give you nothing to deploy from.
You have an Azure Virtual Desktop deployment that contains an Azure compute gallery. The Azure compute gallery contains an image definition named Definition1. Definition1 contains the following image versions:
- 1.0.0
- 1.1.0
- 1.2.0
You need to ensure that when a virtual machine is created from the Azure compute gallery, the 1.1.0 image version is used by default.
What should you do?
A.Select Exclude from latest for image version 1.0.0.
B.Select Exclude from latest for image version 1.2.0.Correct
C.Apply a lock to image version 1.1.0.
D.Apply a tag named default to image version 1.1.0.
Explanation
When a VM is created from an image definition without a specific version, the gallery uses the latest version, which is the highest version number not marked Exclude from latest. Setting Exclude from latest on 1.2.0 makes 1.1.0 the latest. Excluding 1.0.0 changes nothing because 1.2.0 would still be latest, and a resource lock or a tag has no effect on which version is selected.
You have an Azure Virtual Desktop deployment and two Microsoft Entra groups named Group1 and Group2.
You create two Conditional Access policies named Policy1 and Policy2. Policy1 is assigned to Group1. Policy2 is assigned to Group2. Both policies include Azure Virtual Desktop as a cloud app.
You need to meet the following requirements:
- The users in Group1 must be prompted for multi-factor authentication (MFA) when they connect to Azure Virtual Desktop.
- The users in Group2 must reauthenticate every eight hours while they are connected to Azure Virtual Desktop.
Which settings should you configure in Policy1 and Policy2? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Explanation
Policy1: configure Access controls: Grant and select Require multifactor authentication, which prompts Group1 users for MFA when they connect to Azure Virtual Desktop. Sign-in risk and user risk are conditions that decide when a policy applies, not controls that enforce MFA.
Policy2: configure Access controls: Session and set Sign-in frequency to periodic reauthentication every 8 hours. Sign-in frequency is a session control; the Grant control only decides what is required to get access, not how often users must sign in again.
Verifying access...
Access Required
You need to purchase this exam to access practice mode
Unlock a few more questions every day for 300 points you earn free on
Godlike Academy. Everything you unlock with the Daily Climb stays open for 7 days after your last unlock.