Q01 - Question
You plan to deploy Azure Files storage for FSLogix profile containers to support a medium workload. Which file share tier and storage account type should you use?
Domain: Plan and implement an Azure Virtual Desktop infrastructure (40–45%) Type: Single choice
- A. Standard file shares in a general purpose version 2 (GPv2) storage account
- B. Standard file shares in a FileStorage storage account
- C. Premium file shares in a FileStorage storage account
- D. Premium file shares in a general purpose version 2 (GPv2) storage account
C is correct.
Explanation: For a medium workload, premium file shares are recommended. Premium file shares are backed by solid-state drives (SSDs) and must be deployed in the FileStorage storage account type.
A is incorrect: Standard file shares are recommended for light workloads, not medium workloads.
B is incorrect: Standard file shares cannot be deployed in a FileStorage storage account.
D is incorrect: Premium file shares cannot be deployed in a general purpose version 2 (GPv2) storage account.
Q02 - Question
You plan to use Azure NetApp Files to store FSLogix profile containers for a small number of users who are graphic designers and 3D model makers (Power workload). Which performance tier should you recommend?
Domain: Plan and implement an Azure Virtual Desktop infrastructure (40–45%) Type: Single choice
- A. Standard tier
- B. Premium tier
- C. Ultra tier
- D. Transaction optimized tier
C is correct.
Explanation: For a Power workload (graphic designers, 3D model makers) with a small user count, the Ultra tier is recommended for Azure NetApp Files.
A is incorrect: The Standard tier is recommended for large user counts in Power workloads, or for Light workloads.
B is incorrect: The Premium tier is recommended for medium user counts in Power workloads.
D is incorrect: Transaction optimized is a performance tier for Azure Files, not Azure NetApp Files.
Q03 - Question
You need to estimate the connection round-trip time (RTT) from a user's location to the Azure region where you plan to deploy Azure Virtual Desktop virtual machines. Which tool should you use?
Domain: Plan and implement an Azure Virtual Desktop infrastructure (40–45%) Type: Single choice
- A. Azure Virtual Desktop Experience Estimator
- B. Azure Network Watcher Connection monitor
- C. Azure Network Watcher IP flow verify
- D. Remote Desktop Diagnostics
A is correct.
Explanation: The Azure Virtual Desktop Experience Estimator determines the connection round-trip time (RTT) from a current location, through the Azure Virtual Desktop service, to the Azure region where virtual machines are deployed.
B is incorrect: Connection monitor provides end-to-end connection monitoring for Azure and hybrid endpoints, but the Experience Estimator is the specific tool for estimating AVD RTT from a user location.
C is incorrect: IP flow verify is used to detect traffic filtering issues at a virtual machine level.
D is incorrect: Remote Desktop Diagnostics is an event-based aggregator that marks user or administrator actions as a success or failure.
Q04 - Question
You plan to deploy 8,000 session host virtual machines in a single Azure region. Which architecture should you use to comply with the recommended virtual machine limits per subscription?
Domain: Plan and implement an Azure Virtual Desktop infrastructure (40–45%) Type: Single choice
- A. Deploy all 8,000 virtual machines in a single Azure subscription
- B. Deploy all 8,000 virtual machines in a single host pool and resource group
- C. Increase the workspace limit in the Microsoft Entra tenant
- D. Use multiple Azure subscriptions in a hub-spoke architecture connected via virtual network peering
D is correct.
Explanation: Microsoft recommends deploying no more than 5,000 VMs per Azure subscription per region. To manage environments with more than 5,000 VMs, you should create multiple Azure subscriptions in a hub-spoke architecture and connect them via virtual network peering.
A is incorrect: Deploying 8,000 VMs in a single subscription exceeds the recommended limit of 5,000 VMs per subscription per region.
B is incorrect: Resource groups default to a limit of 800 instances for most resource types, and this does not address the subscription limit.
C is incorrect: Workspace limits do not affect the virtual machine capacity limits of an Azure subscription.
Q05 - Question
You plan to implement Quality of Service (QoS) by marking Remote Desktop Protocol (RDP) traffic with Differentiated Services Code Point (DSCP) values. Which prerequisite must you configure first?
Domain: Plan and implement an Azure Virtual Desktop infrastructure (40–45%) Type: Single choice
- A. Enable RDP Shortpath for managed networks
- B. Configure the TCP-based reverse connect transport
- C. Enable RDP Shortpath for public networks with TURN
- D. Block UDP traffic on all network paths
A is correct.
Explanation: QoS policies are not supported for reverse connect transport. You must make sure that RDP Shortpath for managed networks is enabled before implementing DSCP markers on session hosts.
B is incorrect: The TCP-based reverse connect transport does not support QoS policies.
C is incorrect: TURN is used for indirect UDP connections over public networks, whereas QoS requires RDP Shortpath for managed networks.
D is incorrect: RDP Shortpath relies on UDP-based transport; blocking UDP would prevent it from functioning.
Q06 - Question
You plan to configure a private endpoint for initial feed discovery in Azure Virtual Desktop. How should you configure the workspace for the global sub-resource?
Domain: Plan and implement an Azure Virtual Desktop infrastructure (40–45%) Type: Single choice
- A. Use a workspace that contains all of your application groups
- B. Use a separate workspace that does not have any application groups registered to it
- C. Configure the workspace to only allow private access
- D. Create a separate workspace for each host pool in the deployment
B is correct.
Explanation: When creating a private endpoint for initial feed discovery, you should create a separate workspace that is only used for this purpose and doesn't have any application groups registered to it. Deleting this workspace will cause all feed discovery processes to stop working.
A is incorrect: The workspace used for the global sub-resource should not have any application groups registered to it.
C is incorrect: You cannot control access to the workspace used for initial feed discovery; if you configure it to only allow private access, the setting is ignored and it remains accessible from public routes.
D is incorrect: You can only create one private endpoint for the global sub-resource in your entire Azure Virtual Desktop deployment, so you do not create a separate workspace for each host pool.
Q07 - Question
You need to deploy a host pool where each user has their own dedicated virtual machine and local administrator rights to install applications. Which host pool configuration should you use?
Domain: Plan and implement an Azure Virtual Desktop infrastructure (40–45%) Type: Single choice
- A. A pooled host pool with breadth-first load balancing
- B. A pooled host pool with depth-first load balancing
- C. A personal host pool
- D. A validation host pool
C is correct.
Explanation: A personal host pool provides each user with their own dedicated VM, and users are typically local administrators who can install or uninstall apps without impacting other users.
A is incorrect: A pooled host pool shares VMs among multiple users, and users typically do not have local administrator rights.
B is incorrect: A pooled host pool shares VMs among multiple users, and users typically do not have local administrator rights.
D is incorrect: A validation host pool is used to test service updates before applying them to a production environment, not to provide dedicated VMs with local admin rights.
Q08 - Question
A cost-conscious organization wants a pooled host pool to fill one session host with users before it uses the next host. Which load-balancing configuration should you use?
Domain: Plan and implement an Azure Virtual Desktop infrastructure (40–45%) Type: Single choice
- A. Breadth-first load balancing with no session limit
- B. Depth-first load balancing with a maximum session limit
- C. Persistent load balancing with automatic assignment
- D. Breadth-first load balancing with AllowNewConnections set to False
B is correct.
Explanation: Depth-first load balancing allows you to saturate a session host with user sessions before directing new connections to the next session host. It requires a maximum session host limit.
A is incorrect: Breadth-first load balancing evenly distributes user sessions across session hosts.
C is incorrect: Persistent is a load balancer type used for personal host pools, not pooled host pools.
D is incorrect: Setting AllowNewConnections to False prevents the load balancer from sending new connections to the session host.
Q09 - Question
You plan to deploy session host virtual machines using a single Azure Resource Manager (ARM) template deployment in the Azure Virtual Desktop portal. What is the maximum number of virtual machines you can deploy in a single deployment?
Domain: Plan and implement an Azure Virtual Desktop infrastructure (40–45%) Type: Single choice
- A. 132
- B. 400
- C. 500
- D. 800
A is correct.
Explanation: You can currently deploy up to 132 VMs in a single ARM template deployment in the Azure Virtual Desktop portal. To create more, you must run the deployment multiple times.
B is incorrect: 400 is the service limit for HostPools per Workspace.
C is incorrect: 500 is the service limit for Application groups per Microsoft Entra tenant.
D is incorrect: 800 is the default limit for instances of most resource types in a resource group.
Q10 - Question
You need to configure Azure Private Link for Azure Virtual Desktop so that every connection step uses private routes. Which private endpoint configuration should you implement?
Domain: Plan and implement an Azure Virtual Desktop infrastructure (40–45%) Type: Single choice
- A. One connection endpoint per host pool only
- B. One feed endpoint per workspace and one connection endpoint per host pool
- C. One global endpoint for the deployment and one connection endpoint per host pool
- D. One global endpoint for the deployment, one feed endpoint per workspace, and one connection endpoint per host pool
D is correct.
Explanation: To ensure all parts of the connection (initial feed discovery, feed download, and remote session connections) use private routes, you must deploy one global endpoint for the deployment, one feed endpoint per workspace, and one connection endpoint per host pool.
A is incorrect: This configuration leaves initial feed discovery and feed download on public routes.
B is incorrect: This configuration leaves initial feed discovery on public routes.
C is incorrect: This configuration leaves feed download on public routes.