Exam AZ-140 topic 11 question 1 discussion

should be B. Desktop Virtualization Host Pool Contributor Remote Desktop Protocol (RDP) properties under host pool setting. https://docs.microsoft.com/en-us/azure/virtual-desktop/customize-rdp-properties Host Pool Contributor The Host Pool Contributor role lets you manage all aspects of host pools, including access to resources. You'll need an extra contributor role, Virtual Machine Contributor, to create virtual machines. You will need AppGroup and Workspace contributor roles to create host pool using the portal or you can use Desktop Virtualization Contributor role. The following list describes which permissions this role can access: Microsoft.DesktopVirtualization/hostpools/* Microsoft.Resources/subscriptions/resourceGroups/read Microsoft.Resources/deployments/* Microsoft.Authorization/*/read Microsoft.Insights/alertRules/* Microsoft.Support/*

B is correct. D will work too but to follow "least privilege" practice, we should set host pool contributor. Desktop virtualization contributor have more rights than we need to.

Principle of least privilege, Desktop Virtualization Host Pool Contributor.

B s correct answer.

Not A or C D gives full contributor access to all aspects of deployment. B is correct answer using least privilege. https://docs.microsoft.com/en-us/azure/virtual-desktop/rbac https://docs.microsoft.com/en-gb/learn/modules/manage-access/2-role-based-access-control-for-azure-virtual-desktop

It's B

Correct answer is B.

Correct answer is B. The role which D gives is already assigned to Operator2. RDP properties are on the hostpool level.

We're going with "Host Pool Contributor"~

I think answer D is correct. B has way to much rights: Desktop Virtualization Contributor: This role lets you manage all aspects of the deployment but doesn't grant access to compute resources. Desktop Virtualization Host Pool Contributor: This role lets you manage all aspects of host pools, including access to resources. To create virtual machines you need another role, Virtual Machine Contributor. You will also need Application Group Contributor and Workspace Contributor roles to create host pools using the portal, or you can use the Desktop Virtualization Contributor role.

Desktop Virtualization Contributor is correct. D is the answer https://docs.microsoft.com/en-us/azure/virtual-desktop/rbac