Exam AZ-140 All Questions

View all questions & answers for the AZ-140 exam

Exam AZ-140 topic 2 question 26 discussion

Actual exam question from Microsoft's AZ-140

Question #: 26
Topic #: 2

HOTSPOT -
You have an Azure subscription named Subscription1 that contains the users shown in the following table.

Subscription1 contains the Azure Virtual Desktop host pools shown in the following table.

Subscription1 contains the Azure Virtual Desktop application groups shown in the following table.

You perform the role assignments shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

Box 1: Yes -
The P1-0.contoso.com session host is in Pool1.
Group1 has the Desktop Virtualization User Session Operator role for Pool1.
User1 is member of Group1.
Desktop Virtualization User Session Operator
The Desktop Virtualization User Session Operator role allows users to send messages, disconnect sessions, and use the "logoff" function to sign sessions out of the session host. However, this role doesn't let users perform session host management like removing session host, changing drain mode, and so on. This role can see assignments, but can't modify admins. We recommend you assign this role to specific host pools. If you give this permission at a resource group level, the admin will have read permission on all host pools under a resource group.

Box 2: No -
User2 is member of Group2 and Group3. Those do not give access to the P1-0.contoso.com session host in Pool1.

Box 3: Yes -
User2, as a member of Group3, is a Desktop Virtualization User for AppGroup2. Pool2 is in AppGroup2. The P2-0.contoso.com session host is in Pool2.

Desktop Virtualization User -
The Desktop Virtualization User role allows users to use the applications in an application group.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-desktop/rbac

by calciumkid at Sept. 2, 2022, 7:17 a.m.

Comments

Submit Cancel

calciumkid

Highly Voted 1 year, 11 months ago

This appears wrong, Desktop Virtualization User Session Operator does not contain the required "Microsoft.DesktopVirtualization/applicationGroups/useApplications/action" permission to allow login/utilisation of an app group. Should be NNY.

upvoted 9 times

tiger_03

1 year, 10 months ago

But 'Virtual Machine User Login' role is assigned directly to the P1 session host. So shouldnt the answer be YNY

upvoted 19 times

Magis

1 year, 9 months ago

Good cache! Agree with YNY for this reason. Qestion answer is correct. Just an explanation is wrong for the first point.

upvoted 4 times

zukako

1 year, 5 months ago

User2 cannot have appropriate role for p2 so, YNN

upvoted 6 times

picho707

1 year, 1 month ago

I think you are correct. The MS Assessment test has a question of what role is needed to log in to a session host pool. The choices are "Desktop Virtualization User" and "Virtual Machine User Login". MS answer is "Virtual Machine User Login" because you need to log in to the desktop of the session host. It will be a different story if the Application Group Type were "RemoteApp".

upvoted 1 times

...

Load full discussion...

...

Mtimmermans

1 year, 10 months ago

Agree, see https://learn.microsoft.com/en-us/azure/virtual-desktop/rbac for more information about the role.

upvoted 2 times

...

97cbe9c

Most Recent 6 months ago

Y/N/N because you need virtual machine user login role to connect to an AVD host or am i wrong? so only User1 has that role

upvoted 1 times

...

RDIO

10 months, 2 weeks ago

Y/N/Y https://learn.microsoft.com/en-us/azure/virtual-desktop/rbac#desktop-virtualization-user

upvoted 1 times

...

vipjason

10 months, 3 weeks ago

It should be NNY. Neither user has access to pool 1 while both users have acccess to pool 2. The question ask about user 2's access to pool 2 which is YES.

upvoted 2 times

...

mcclane654

10 months, 3 weeks ago

NNN I would say all of them is NO after testing in my lab. Virtual Machine User Login is required to get access to an remoteapp/desktop. Desktop Virtualization User - this permission is automaticly assigned when you assign a user to an application group. This means User 1would be able to log into pool 1 due to group 1, however only have pool 2 assigned via group 3. Therefore Question one: NO User 2 is assigned Pool 2. but lack virtual machine user login rights. Meaning both last questions are NO the two other roles are more admin?

upvoted 1 times

...

c7d45f4

11 months, 1 week ago

Yes, User1 is a member of Groupl and has been assigned the "Desktop Virtualization Reader" role for Pool1. This role allows them to view information about the session hosts and resources in Pool1. No, User2 is not assigned any specific role for Pool1. Without an assigned role or group membership that grants access to Pool1, User2 will not be able to connect to the P1-O.contoso.com session host. No, similar to the previous statement, User2 is not assigned any specific role for Pool2 (P2-O.contoso.com), and therefore, User2 will not be able to connect to the P2-O.contoso.com session host. Y N N

upvoted 2 times

...

Lapiduse

1 year ago

Where is Group 2 in the questions??

upvoted 2 times

...

vuphongtran

1 year, 5 months ago

The answers are right but the explanation is a bit confusing. 1 & 3 are yes but they are in different ways: 1 is using regular rdp (or bastion), not avd - 3 is using the published desktop appgroup2 in avd

upvoted 2 times

...

ZokiZokic2023

1 year, 6 months ago

Answers are correct: https://learn.microsoft.com/en-us/azure/virtual-desktop/rbac#desktop-virtualization-user - Desktop Virtualization User: allows users to use the applications in an application group. - Virtual Machine User Login: view Virtual Machines in the portal and login as a regular user. - Desktop Virtualization User: allows users to use the applications in an application group. - Desktop Virtualization User Session Operator: allows users to send messages, disconnect sessions, and use the "logoff" function to sign sessions out of the session host.

upvoted 1 times

ZokiZokic2023

1 year, 6 months ago

- Desktop Virtualization Reader: allows users to view everything in the deployment, but doesn't let them make any changes.

upvoted 1 times

...

InsulT

1 year, 10 months ago

User 1 has Virtual Machine User Login assigned for that VM, so User 1 should be able to login to that resource, right? Virtual Machine User Login: Microsoft.Compute/virtualMachines/login/action Log in to a virtual machine as a regular user

upvoted 1 times

...

Houssemonline

1 year, 11 months ago

IT'S TRUE YNY

upvoted 1 times

...