Free Microsoft AZ-140 Exam Dumps Questions & Answers

Hotspot Question
You have an on-premises root certification authority (CA) named AdatumCA.
You have an Azure subscription that contains an Azure Virtual Desktop deployment. The subscription is linked to a Microsoft Entra tenant that contains the users shown in the following table.

All the users have been granted permission to connect to the Azure Virtual Desktop deployment and have AdatumCA-issued certificates installed on their devices.
You create a Conditional Access policy named CAPolicy1 that has the following settings:
Assignments
- Users: Group 1
- Target resources: Azure Virtual Desktop
Access controls
- Grant: Require multifactor authentication
Enable policy: On
The certificate-based authentication method policy has the Enable and Target settings shown in the Enable and Target exhibit. (Click the Enable and Target tab.)

The certificate-based authentication method policy has the Configure settings shown in the Configure exhibit. (Click the Configure tab.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
Box 1: Yes
User1 is in Group1.
CAPolicy1 assigns users in Group1.
CAPolicy1 access control grants Require multifactor authentication.
The certificate-based authentication method policy targets Group1.
The certificate-based authentication method policy protection level is Single-factor authentication.
Note: When certificate-based authentication is correctly configured as a single-factor method, the user does not need to provide a password, as the certificate itself serves as the proof of identity.
The certificate replaces the knowledge factor (like a password) with possession of a unique digital file containing a public key and identity information issued by a trusted Certificate Authority (CA).
This approach can offer a more secure, phishing-resistant, and passwordless login experience.
Box 2: No
User2 is in Group2.
The certificate-based authentication method policy targets Group1 only, not Group2.
Box 3: Yes
User3 is in Group1 and in Group2.
The certificate-based authentication method policy targets Group1
Reference:
https://learn.microsoft.com/en-us/entra/identity/authentication/concept-certificate-based-authentication-technical-deep-dive

Case Study 1 - Contoso, Ltd
Overview
Contoso, Ltd. is a law firm that has a main office in Montreal and branch offices in Paris and Seattle. The Seattle branch office opened recently.
Contoso has an Azure subscription and uses Microsoft 365.
Existing Infrastructure. Active Directory
The network contains an on-premises Active Directory domain named contoso.com and an Azure Active Directory (Azure AD) tenant. One of the domain controllers runs as an Azure virtual machine and connects to a virtual network named VNET1. All internal name resolution is provided by DNS server that run on the domain controllers.
The on-premises Active Directory domain contains the organizational units (OUs) shown in the following table.

The on-premises Active Directory domain contains the users shown in the following table.

The Azure AD tenant contains the cloud-only users shown in the following table.

Existing Infrastructure. Network Infrastructure
All the Azure virtual networks are peered. The on-premises network connects to the virtual networks.
All servers run Windows Server 2019. All laptops and desktop computers run Windows 10 Enterprise.
Since users often work on confidential documents, all the users use their computer as a client for connecting to Remote Desktop Services (RDS).
In the West US Azure region, you have the storage accounts shown in the following table.

Existing Infrastructure. Remote Desktop Infrastructure
Contoso has a Remote Desktop infrastructure shown in the following table.

Requirements. Planned Changes
Contoso plans to implement the following changes:
- Implement FSLogix profile containers for the Paris offices.
- Deploy a Azure Virtual Desktop host pool named Pool4.
- Migrate the RDS deployment in the Seattle office to Azure Virtual
Desktop in the West US Azure region.
Requirements. Pool4 Configuration
Pool4 will have the following settings:
- Host pool type: Pooled
- Max session limit: 7
- Load balancing algorithm: Depth-first
- Images: Windows 10 Enterprise multi-session
- Virtual machine size: Standard D2s v3
- Name prefix: Pool4
- Number of VMs: 5
- Virtual network: VNET4
Requirements. Technical Requirements
Contoso identifies the following technical requirements:
- Before migrating the RDS deployment in the Seattle office, obtain the recommended deployment configuration based on the current RDS utilization.
- For the Azure Virtual Desktop deployment in the Montreal office,
disable audio output in the device redirection settings.
- For the Azure Virtual Desktop deployment in the Seattle office, store the FSLogix profile containers in Azure Storage.
- Enable Operator2 to modify the RDP Properties of the Azure Virtual
Desktop deployment in the Montreal office.
- From a server named Server1, convert the user profile clicks to the
FSLogix profile containers.
- Ensure that the Pool1 virtual machines only run during business
hours.
- Use the principle of least privilege.
You plan to implement the FSLogix profile containers for the Seattle office.
Which storage account should you use?

• A.storage4
• B.storage1
• C.storage2
• D.storage3

You have a Azure Virtual Desktop host pool that contains 20 Windows 10 Enterprise multi- session hosts.
Users connect to the Azure Virtual Desktop deployment from computers that run Windows 10.
You plan to implement FSLogix Application Masking.
You need to deploy Application Masking rule sets. The solution must minimize administrative effort.
To where should you copy the rule sets?

• A.C:\Program Files\FSLogix\Apps\Rules on every Windows 10 computer
• B.C:\Program Files\FSLogix\Apps\Rules on every session host
• C.the FSLogix profile container of each user

You have an Azure Virtual Desktop deployment that contains the resources shown in the following table.

You need to enable just-in-time (JIT) VM access for all the session hosts.
What should you do first?

• A.Assign network security groups (NSGs) to the network interfaces of the five session hosts.
• B.Configure Access control (IAM) for HostPool1.
• C.Assign a network security group (NSG) to Subnet1.
• D.Deploy Azure Bastion to VNET1.

You have an Azure Virtual Desktop deployment that uses Microsoft 365 cloud services including Microsoft Teams.
Users use the Remote Desktop client to connect to the deployment from computers that run Windows 10.
You need to support audio and video in Azure Virtual Desktop and provide the users with access to Microsoft Teams calling and meeting features.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

• A.Configure the IsWVDEnvironment registry key on the Windows 10 computers
• B.Install the Microsoft Teams desktop app on the virtual machines
• C.Install the Microsoft Teams desktop app on the Windows 10 computers
• D.Configure the IsWVDEnvironmentregistry key on the virtual machines
• E.Install the Microsoft Teams WebSocket Service on the virtual machines
• F.Install the Microsoft Teams WebSocket Service on the Windows 10 computers