AZ-140: Configuring and Operating Microsoft Azure Virtual DesktopDemo

By Microsoft · Question Mode

QuestionQ199

Plan and implement identity and security

You need to recommend an authentication solution that satisfies the performance requirements.

Which two actions should be included in the recommendation? Each correct answer represents part of the solution.

NOTE: Each correct selection is worth one point.

Choose two
  • A Join all the session hosts to Azure AD.
  • B In each Azure region that will contain the Azure Virtual Desktop session hosts, create an Azure Active Directory Domain Service (Azure AD DS) managed domain.
  • C Deploy domain controllers for the on-premises Active Directory domain on Azure virtual machines to the new sites..
  • D Deploy read-only domain controllers (RODCs) on Azure virtual machines to the new sites.
  • E In each Azure region that will contain the Azure Virtual Desktop session hosts, create an Active Directory site.
Explanation

Azure Virtual Desktop session hosts that use Active Directory Domain Services must be able to connect to domain controllers and relevant DNS servers. Deploying replica domain controllers for the existing on-premises AD DS domain in the new Azure sites supplies local directory and Kerberos authentication services. Creating an Active Directory site for each Azure region associates its subnets with that site so clients locate local domain controllers and Active Directory can manage intersite replication appropriately.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!