- (Topic 3)
Your on-premises network contains 20 Windows 10 devices. You have an Azure Virtual Desktop deployment.
You need to deploy the Microsoft Remote Desktop client (MSRDC) to the devices. The MSRDC must be available to everyone who sign in to the devices.
What should you do?

1. A. Install the MSRDC by using msiexec.exe and the ALLUSERS=1 command line option.
2. B. Install the MSRDC by using msiexec.exe and the ALLUSERS=2 command line option.
3. C. Install the MSRDC by using msiexec.exe and the MSIINSTALLPERUSER=1 command line option.

Correct Answer: A

- (Topic 3)
You have an Azure Virtual Desktop deployment. You have a RemoteApp named App1.
You discover that from the Save As dialog box of App1, users can run executable applications other than App1 on the session hosts.
You need to ensure that the users can run only published applications on the session hosts.
What should you do?

1. A. Configure a conditional access policy in Azure Active Directory (Azure AD).
2. B. Modify the Access control (1AM) settings of the host pool.
3. C. Modify the RDP Properties of the host pool.
4. D. Configure an AppLocker policy on the session hosts.

Correct Answer: D
Reference:
https://docs.microsoft.com/en-us/azure/virtual-desktop/security-guide

HOTSPOT - (Topic 3)
You have an Azure Virtual Desktop deployment that has just-in-time (JIT) VM access enabled.
You need to request access to a session host by using JIT VM access.
Which three virtual machine settings can you use to request access? To answer, select the appropriate settings in the answer area.
NOTE: Each selection is worth one point.

Solution:
Connect: https://learn.microsoft.com/en-us/azure/defender-for-cloud/just-in-time-access-usage#request-access-to-a-jit-enabled-vm-from-the-azure-virtual-machines-connect-page
Microsoft Defender for Cloud: https://learn.microsoft.com/en-us/azure/defender-for-cloud/just-in-time-access-usage#work-with-jit-vm-access-using-microsoft-defender-for- cloud
Configuration: https://learn.microsoft.com/en-us/azure/defender-for-cloud/just-in-time-access-usage#enable-jit-on-your-vms-from-azure-virtual-machines

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Topic 3)
You have an Azure Virtual Desktop deployment that contains a session host named Host1.
You need to configure Windows Defender Firewall to allow inbound network traffic for RDP Shortpath on Host1.
Which program in the C:WindowsSystem32 folder should you specify in the inbound firewall rule?

1. A. Rdpshell.exe
2. B. Svchost.exe
3. C. Raserver.exe
4. D. Mstsc.exe

Correct Answer: B
New-NetFirewallRule -DisplayName 'Remote Desktop - RDP Shortpath (UDP-In)' -Action Allow -Description 'Inbound rule for the Remote Desktop service to allow RDP Shortpath traffic. [UDP 3390]' -Group '@FirewallAPI.dll,-28752' -Name 'RemoteDesktop-UserMode-In-RDPShortpath-UDP' -PolicyStore PersistentStore -Profile Domain, Private -Service TermService -Protocol UDP -LocalPort 3390 -Program '%SystemRoot%\system32\svchost.exe' -Enabled:True https://learn.microsoft.com/en- us/azure/virtual-desktop/configure-rdp-shortpath?tabs=managed-networks

HOTSPOT - (Topic 3)
You have a Windows Virtual Desktop deployment.
Many users have iOS devices that have the Remote Desktop Mobile app installed.
You need to ensure that the users can connect to the feed URL by using email discovery instead of entering the feed URL manually.
How should you configure the _msradc DNS record? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Solution:
* 1. TXT
* 2. https://rdweb.wvd.microsoft.com/api/arm/feeddiscovery
Set up email discovery to subscribe to your RDS feed https://docs.microsoft.com/en- us/windows-server/remote/remote-desktop-services/rds-email-discovery https://docs.microsoft.com/nl-nl/learn/modules/m365-deploy-wvd/2-deployment-overview

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A