Question bank
Microsoft Certified: Azure Virtual Desktop Specialty
42 Microsoft Certified: Azure Virtual Desktop Specialty questions with the correct answer and a written explanation, organised across 4 exam domains.
- 42 questions
- 4 domains
- Foundation level
certilumQuestion index
Jump straight to any question. Answers and explanations are inline.
Monitor and maintain an Azure Virtual Desktop infrastructure
5 questions in this domain
- Question 1Single Choice
Which Azure service provides a global view of Azure service availability, including Azure Virtual Desktop, across regions?
- AAzure Service HealthCorrect answer
- BResource Health
- CAzure Monitor
- DLog Analytics
Why this is the answer
Azure Service Health gives a global view of Azure service availability, including AVD. Resource Health reports only on individual resources, such as a session host VM.
- Question 2Multiple Select
Which two actions are required to send AVD user connection events to Log Analytics? (Choose two.)
- AEnable diagnostic settings on the host poolCorrect answer
- BCreate a Log Analytics workspaceCorrect answer
- CDeploy Azure Monitor Agent on session hosts
- DConfigure Azure Service Health alerts
Why this is the answer
Host pool diagnostic settings send connection events to Log Analytics, and the workspace stores them. The agent collects OS performance data, not AVD connection events.
- Question 3Interactive
Examine the KQL query in the code block. Which Log Analytics table does it query?
- AWVDDiagnosticsCorrect answer
- BWVDCheckpoints
- CWVDErrors
- DInsightsMetrics
Why this is the answer
The query starts from the WVDDiagnostics table and filters Connection activity with a failed state to count failures over time.
- Question 4Single Choice
Which Log Analytics table records the successful phases of an Azure Virtual Desktop session establishment?
- AWVDCheckpointsCorrect answer
- BWVDDiagnostics
- CInsightsMetrics
- DPerf
Why this is the answer
WVDCheckpoints records the successful stages of session establishment. WVDDiagnostics is used for errors and other activity types, not successful phase tracing.
- Question 5Multiple Select
Which two statements about the Azure Monitor Agent are correct? (Choose two.)
- AUses Data Collection RulesCorrect answer
- BRecommended for new deploymentsCorrect answer
- CTied to workspace configuration
- DCannot send Windows Event logs
Why this is the answer
Azure Monitor Agent uses Data Collection Rules and is Microsoft's recommended agent for new deployments. Legacy MMA is tied to workspace configuration and can send event logs.
Plan and implement an Azure Virtual Desktop infrastructure
19 questions in this domain
- Question 6Single Choice
In Azure Virtual Desktop, a host pool is the main compute boundary for user sessions. What does this resource contain?
- AA collection of session host VMsCorrect answer
- BA layer that publishes RemoteApps
- CA container for FSLogix profiles
- DAn identity provider for users
Why this is the answer
A host pool is the compute container holding session host virtual machines. Workspaces publish applications, and FSLogix stores profiles separately.
- Question 7Multiple Select
A user reports that an Azure Virtual Desktop resource is not visible and cannot be launched. Which two assignments are required to fix this issue?
- AApplication group assignmentCorrect answer
- BWorkspace visibilityCorrect answer
- CHost pool registration token
- DStorage account key
Why this is the answer
A user needs workspace visibility to see resources and application group assignment to launch them. Registration tokens and storage keys do not grant user access.
- Question 8Interactive
An administrator uses the Azure CLI command shown in the code block. Which Azure Virtual Desktop resource is created by this command?
- AA pooled host pool with breadth-first load balancingCorrect answer
- BA personal host pool with automatic assignment
- CA workspace with two application groups
- DA registered session host VM
Why this is the answer
The command creates a pooled host pool with breadth-first load balancing and a maximum session limit of five. It does not create a workspace or session host.
- Question 9Single Choice
A business requires each user to have a dedicated session host virtual machine. Which Azure Virtual Desktop host pool type should the architect select?
- APersonal host poolCorrect answer
- BPooled host pool
- CValidation host pool
- DHybrid host pool
Why this is the answer
A personal host pool assigns a dedicated session host to each user. Pooled host pools share session hosts across many users.
- Question 10Multiple Select
Which two statements accurately describe how FSLogix profile containers function in Azure Virtual Desktop?
- AStored as VHDX on SMB sharesCorrect answer
- BMounted at sign-in and dismounted at sign-outCorrect answer
- CUsed only in personal host pools
- DRequires Azure AD Domain Services
Why this is the answer
FSLogix stores profiles in VHDX files on SMB shares. Containers are attached at sign-in and detached at sign-out.
- Question 11Interactive
The registry snippet shown in the code block is about to be applied to a session host. Which FSLogix behavior is enabled by this configuration?
- AEnables profiles and sets the VHD locationCorrect answer
- BDisables profile containers
- CCreates a storage account
- DConfigures the Office container only
Why this is the answer
The registry key enables FSLogix profiles and sets the VHDLocations UNC path that session hosts use to mount profile containers.
- Question 12Single Choice
In an Azure Virtual Desktop deployment, what is the role of a workspace in relation to application groups?
- AIt presents application groups to usersCorrect answer
- BIt stores session host VMs
- CIt manages load balancing
- DIt provides domain authentication
Why this is the answer
A workspace is the presentation layer that makes application groups visible to clients. It does not store VMs or manage sessions.
- Question 13Multiple Select
Which two network practices should be implemented when deploying session hosts for Azure Virtual Desktop?
- AAllow outbound HTTPS to AVD endpointsCorrect answer
- BBlock inbound RDP from the internetCorrect answer
- CPlace session hosts on the domain controller subnet
- DAllow inbound RDP from all public IPs
Why this is the answer
Session hosts need outbound HTTPS to AVD endpoints and should block direct inbound internet RDP because reverse connect is used.
- Question 14Interactive
The command in the code block changes the load-balancing type of an Azure Virtual Desktop host pool. Which user session behavior will result?
- ANew sessions fill one host before moving to the nextCorrect answer
- BNew sessions spread evenly across all hosts
- CThe pool becomes a personal host pool
- DAll session hosts start automatically
Why this is the answer
Depth-first load balancing sends new sessions to a host until its maximum session limit is reached before using the next host.
- Question 15Single Choice
Which Azure Virtual Desktop load-balancing algorithm should be selected when the goal is to minimize the number of active session hosts?
- ADepth-firstCorrect answer
- BBreadth-first
- CRound robin
- DRandom distribution
Why this is the answer
Depth-first minimizes the number of running hosts by filling each host to its session limit before using another host.
- Question 16Multiple Select
Which two software components must be installed on a session host to support registration with the Azure Virtual Desktop control plane?
- AAVD AgentCorrect answer
- BBootloaderCorrect answer
- CFSLogix Agent
- DAzure Backup Extension
Why this is the answer
The AVD Agent communicates with the control plane, and the Bootloader handles side-by-side upgrades of the agent.
- Question 17Interactive
An administrator executes the PowerShell command in the code block. What does this command generate for the Azure Virtual Desktop host pool?
- AA registration token valid for 30 daysCorrect answer
- BA new host pool in the resource group
- CAn Azure Active Directory account
- DA storage account SAS token
Why this is the answer
The command generates registration information with a token used to register session hosts to the named host pool before it expires.
- Question 18Single Choice
Which profile container solution is recommended for maintaining user settings in Azure Virtual Desktop pooled and personal host pools?
- AFSLogix profile containersCorrect answer
- BWindows roaming profiles
- CLocal user profiles
- DOneDrive Known Folder Move
Why this is the answer
FSLogix profile containers are the recommended profile solution for AVD, providing persistent profiles in pooled and personal host pools.
- Question 19Multiple Select
Which two fully managed Azure storage services are commonly recommended for hosting FSLogix profile containers?
- AAzure FilesCorrect answer
- BAzure NetApp FilesCorrect answer
- CLocal temporary disk
- DAzure Blob storage
Why this is the answer
Azure Files and Azure NetApp Files are fully managed SMB-based storage services commonly used for FSLogix profile containers.
- Question 20Interactive
The JSON snippet in the code block defines part of an Azure Virtual Desktop scaling plan. What does the minimumHostsPct property determine?
- AMinimum percentage of session hosts kept runningCorrect answer
- BMaximum CPU percentage per host
- CPercentage of users allowed to sign in
- DMaximum session limit per host
Why this is the answer
minimumHostsPct defines the minimum percentage of session hosts that must remain running during that scaling phase.
- Question 21Single Choice
Which Azure Virtual Desktop feature uses UDP to create a direct connection between the client and the session host?
- ARDP ShortpathCorrect answer
- BAzure Bastion
- CReverse connect transport
- DPrivate endpoint
Why this is the answer
RDP Shortpath establishes a direct UDP-based connection between client and session host, reducing latency and jitter.
- Question 22Multiple Select
Which two prerequisites must be satisfied before RDP Shortpath can provide a direct connection in Azure Virtual Desktop?
- ASupported Windows clientCorrect answer
- BSession host configured for RDP ShortpathCorrect answer
- CPublic IP on every session host
- DTCP port 3389 opened to the internet
Why this is the answer
RDP Shortpath requires a supported client and an enabled session host listener. A public IP is not always required.
- Question 23Interactive
The PowerShell command in the code block updates a pooled host pool. Which two effects will this command have on session placement and capacity?
- ANew sessions are distributed across available session hostsCorrect answer
- BEach session host can host at most four sessionsCorrect answer
- CDepth-first load balancing is enabled
- DThe host pool becomes a personal host pool
Why this is the answer
Breadth-first spreads sessions across hosts, and MaxSessionLimit 4 caps the number of sessions per session host.
- Question 24Single Choice
What is the primary purpose of deploying a validation host pool in addition to a production Azure Virtual Desktop host pool?
- ATo receive service updates before productionCorrect answer
- BTo increase host pool capacity during peak
- CTo store FSLogix profile containers
- DTo provide disaster recovery replication
Why this is the answer
A validation host pool is used to test Microsoft service updates and configuration changes before they reach production.
Plan and implement identity and security
8 questions in this domain
- Question 25Single Choice
Which Microsoft service provides a fully managed domain in Azure for AVD session hosts without requiring you to manage domain controllers?
- AMicrosoft Entra Domain ServicesCorrect answer
- BActive Directory Domain Services on Azure VMs
- CMicrosoft Entra ID
- DOn-premises Active Directory Domain Services
Why this is the answer
Microsoft Entra Domain Services is the managed domain service that supports domain join and Kerberos/NTLM authentication without requiring domain controller management.
- Question 26Multiple Select
Which two components are required to synchronize on-premises AD DS users so they can authenticate through Microsoft Entra Domain Services?
- AMicrosoft Entra ConnectCorrect answer
- BPassword Hash SynchronizationCorrect answer
- CPass-Through Authentication
- DActive Directory Federation Services
Why this is the answer
Hybrid users must be synchronized by Microsoft Entra Connect, and Password Hash Synchronization must be enabled to supply password hashes for the managed domain.
- Question 27Interactive
An administrator prepares the Entra Connect configuration shown. What must be changed before Microsoft Entra Domain Services can authenticate hybrid AVD users?
- AEnable Password Hash SynchronizationCorrect answer
- BSwitch to Active Directory Federation Services
- CDisable OU scoping
- DSet sync method to Seamless SSO only
Why this is the answer
Entra DS requires password hashes for Kerberos/NTLM, so Password Hash Synchronization must be enabled; pass-through authentication alone is insufficient.
- Question 28Single Choice
Which RBAC role must be assigned to a Microsoft Entra ID group at the application group scope so users can access published AVD resources?
- ADesktop Virtualization UserCorrect answer
- BDesktop Virtualization Reader
- CDesktop Virtualization Session Host Operator
- DVirtual Machine User Login
Why this is the answer
The Desktop Virtualization User role includes the data actions required to discover and launch published desktops and RemoteApps when scoped to the application group.
- Question 29Multiple Select
Which two tasks can be performed by an administrator who has the Desktop Virtualization Session Host Operator role on a host pool?
- APlace session hosts in drain modeCorrect answer
- BLog off active user sessionsCorrect answer
- CDelete the host pool
- DAssign RBAC roles to other users
Why this is the answer
This role supports session host and user session management at the host pool scope but does not allow deleting host pools or delegating access.
- Question 30Interactive
Does the role assignment shown provide a helpdesk team with the needed permissions to manage user sessions on AVD session hosts?
- AYes, because this role manages sessions and hosts.Correct answer
- BNo, it grants read-only access.
- CNo, it grants Contributor on the resource group.
- DYes, it grants VM Administrator Login.
Why this is the answer
The Desktop Virtualization Session Host Operator role scoped to the host pool allows drain mode, logoff, and message actions without broader Azure resource permissions.
- Question 31Single Choice
Which cloud application should a Conditional Access policy target to require MFA for Azure Virtual Desktop sign-ins?
- AAzure Virtual DesktopCorrect answer
- BMicrosoft Azure Active Directory
- CWindows Virtual Desktop
- DOffice 365 Exchange Online
Why this is the answer
Conditional Access policies for AVD must target the Azure Virtual Desktop enterprise application so feed discovery and session access are protected.
- Question 32Multiple Select
Which two controls are essential when planning encryption and key management for regulated AVD workloads?
- ACustomer-managed keys for disks and Azure FilesCorrect answer
- BAzure Key Vault Managed HSM with purge protectionCorrect answer
- CPlatform-managed keys only
- DAllowing RDP over the public internet
Why this is the answer
Regulated workloads require customer-held keys and hardened key storage; default platform-managed encryption alone is not sufficient.
Plan and implement user environments and apps
10 questions in this domain
- Question 33Single Choice
Where must FSLogix profile containers be stored in an Azure Virtual Desktop pooled environment?
- AA central SMB 3.0 file shareCorrect answer
- BThe local disk of each session host
- CA standard Azure Blob container as the primary store
- DA mapped drive letter on the session host
Why this is the answer
FSLogix profile containers must be on a central SMB 3.0 share such as Azure Files or NetApp Files; local disks and mapped drives are unsupported.
- Question 34Multiple Select
Which storage provider types are supported in FSLogix Cloud Cache locations? Select all that apply.
- AazureFilesCorrect answer
- BazureBlobCorrect answer
- CsambaCorrect answer
- DnetappCorrect answer
Why this is the answer
Cloud Cache supports azureFiles, azureBlob, samba, and netapp as provider types for replicating profile containers.
- Question 35Interactive
Review the registry excerpt. What additional prerequisite must be satisfied for FSLogix to mount profiles from the configured location?
- ASMB 3.0 share with identity-based authenticationCorrect answer
- BCloud Cache locations must be configured before mounting
- CThe Office 365 container must be enabled
- DThe profile share must be an Azure Blob container
Why this is the answer
FSLogix requires an SMB 3.0 share with identity-based authentication for the configured UNC path; Cloud Cache and ODFC are optional.
- Question 36Single Choice
What is true about the built-in application group created with an AVD host pool?
- AIt is a Desktop group publishing the full desktop; one per host poolCorrect answer
- BIt is a RemoteApp group that can be created multiple times
- CIt automatically appears to users without workspace registration
- DIt can be converted to a RemoteApp group after creation
Why this is the answer
Every host pool has one built-in Desktop application group. It still requires workspace registration and user assignment to appear.
- Question 37Multiple Select
Which steps are required for a user to see and launch a RemoteApp in the AVD feed? Select all that apply.
- AAssign the user the Desktop Virtualization User role on the application groupCorrect answer
- BRegister the application group to a workspaceCorrect answer
- CGrant the user read or Desktop Virtualization User access on the workspaceCorrect answer
- DAdd the user to the host pool's built-in role for direct RDP access
Why this is the answer
AVD feed access requires an application group assignment, workspace registration, and workspace-level access; host pool role assignment is not enough.
- Question 38Interactive
An administrator runs the PowerShell command shown. What must be true of the target application group for this command to succeed?
- AIt must be a RemoteApp application groupCorrect answer
- BIt must be a Desktop application group
- CIt must be an MSIX app attach package group
- DIt must be the built-in default Desktop group
Why this is the answer
Add-AzWvdApplication is used to publish individual applications and is valid only inside a RemoteApp application group.
- Question 39Single Choice
Which storage option is recommended for hosting MSIX app attach packages?
- AAzure Files premium share accessible over SMBCorrect answer
- BStandard Azure Blob container
- CLocal disk on each session host
- DThe same share used for FSLogix profiles
Why this is the answer
MSIX app attach should use a premium Azure Files share over SMB; the profile share is separate and Blob or local storage is unsupported.
- Question 40Multiple Select
Which policy-management methods can apply user and device settings to AVD session hosts? Select all that apply.
- AActive Directory Group PolicyCorrect answer
- BMicrosoft Intune Settings Catalog profilesCorrect answer
- CEnd-user manual registry edits during a pooled session
- DFSLogix profile containers
Why this is the answer
AVD supports GPO and Intune. FSLogix stores profiles, not policy, and manual registry edits do not persist.
- Question 41Interactive
A session host receives the same wallpaper setting from both GPO and Intune. Which mechanism should be configured to ensure the Intune value always wins?
- AEnable MDMWinsOverGPCorrect answer
- BEnable loopback processing in replace mode
- CRemove the session host from the domain
- DSet the FSLogix exclusion list for wallpaper
Why this is the answer
MDMWinsOverGP gives Intune precedence when a policy setting is also configured by Group Policy.
- Question 42Single Choice
Users in Teams meetings report choppy audio and video. Which feature should be enabled to improve their experience?
- ATeams media optimizationCorrect answer
- BMultimedia redirection for video players
- CRedirecting all USB devices to the session
- DInstalling Teams in per-user mode only
Why this is the answer
Teams media optimization offloads call processing to the local client; MMR is for video playback, not real-time calls.
Frequently asked questions
Everything about the Microsoft Certified: Azure Virtual Desktop Specialty question bank and how to use it.