AZ-140: Configuring and Operating Microsoft Azure Virtual DesktopDemo

Question

You have an Azure Active Directory Domain Services (Azure AD DS) managed domain called contoso.com.

You create an Azure Virtual Desktop host pool named Pool1 and assign the Virtual Machine Contributor role on the Azure subscription to a user named Admin1.

You need to ensure that Admin1 can add session hosts to Pool1. The solution must follow the principle of least privilege.

Which two actions should you take? Each correct answer is part of the solution.

NOTE: Each correct selection is worth one point.

Choose two

A Assign Admin1 the Desktop Virtualization Host Pool Contributor role for Pool1
B Assign Admin1 the Desktop Virtualization Session Host Operator role for Pool1
C Add Admin1 to the AAD DC Administrators group
D Assign a Microsoft 365 Enterprise E3 license to Admin1
E Generate a registration token

Explanation

Creating and adding Azure Virtual Desktop session hosts requires both Virtual Machine Contributor and Desktop Virtualization Host Pool Contributor permissions. Admin1 already has the VM permission, so assign Desktop Virtualization Host Pool Contributor only on Pool1. Session hosts joined to an Azure AD DS managed domain require an account with permission to join computers to that domain; members of the AAD DC Administrators group have that permission.

Learn more

AZ-140: Configuring and Operating Microsoft Azure Virtual DesktopDemo

AstroTutor

Notes

Readiness

QuestionQ210

Community Discussion