Exam AZ-140 topic 6 question 29 discussion

Actual exam question from Microsoft's AZ-140

Question #: 29
Topic #: 6

You have an Azure subscription that is linked to a hybrid Microsoft Entra tenant and contains a storage account named storage.

You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains session hosts that are Microsoft Entra joined.

You plan to implement FSLogix profile containers for the session hosts of Pool1.

In storage1, you create a new Azure Files share named share1.

You need to ensure that share1 can store the FSLogix profile containers.

What should you enable for share1?

A. a security profile set to Maximum security
B. a security profile set to Maximum compatibility
C. Microsoft Entra Domain Services
D. Microsoft Entra Kerberos

Show Suggested Answer

Suggested Answer: D 🗳️

by jeff1988 at Nov. 6, 2024, 9:08 p.m.

Comments

Submit Cancel

ClintC03

6 months ago

Selected Answer: C

From the Azure portal, open the storage account you created previously. In the Data storage section, select File shares. In the main section of the page, next to Active Directory, select Not configured. In the box for Microsoft Entra Domain Services, select Set up. Tick the box to Enable Microsoft Entra Domain Services for this file share, then select Save. An Organizational Unit (OU) called AzureFilesConfig will be created at the root of your domain and a user account named the same as the storage account will be created in that OU. This account will be used as the Azure Files service account. https://learn.microsoft.com/en-us/fslogix/how-to-configure-profile-container-azure-files-active-directory?tabs=aadds

upvoted 1 times

ClintC03

5 months, 1 week ago

I am incorrect, it should be D. https://learn.microsoft.com/en-us/fslogix/how-to-configure-profile-container-azure-ad

upvoted 3 times

...

jeff1988

7 months, 2 weeks ago

Selected Answer: D

D. Microsoft Entra Kerberos To ensure that your Azure Files share (share1) can store FSLogix profile containers for your Microsoft Entra joined session hosts, you should enable Microsoft Entra Kerberos. This allows the Azure Files share to authenticate using Microsoft Entra ID, which is necessary for environments where session hosts are Microsoft Entra joined1.

upvoted 3 times

...