Exam AZ-140 topic 3 question 35 discussion

Actual exam question from Microsoft's AZ-140

Question #: 35
Topic #: 3

You have an Azure Virtual Desktop deployment that contains a host pool named Pool1.

You plan to create a Windows 10 image named Image1 to deploy new session hosts to Pool1.

You need to ensure that all the new session hosts deployed by using Image1 are onboarded to Microsoft Defender for Endpoint.

What should you do?

A. Run a Defender for Endpoint onboarding script on Image1, and then run sysprep.
B. Add a Defender for Endpoint onboarding script to image1, and then run the script at first start.
C. Create an MSIX package for Pool1.
D. Create an automation task for Pool1.

Show Suggested Answer

Suggested Answer: B 🗳️

by Bonesurfer at Oct. 29, 2024, 8:55 p.m.

Comments

Submit Cancel

Dahkoht

4 months, 1 week ago

Selected Answer: B

GPT's updated explanation on why it's not A, A. Run a Defender for Endpoint onboarding script on Image1, and then run sysprep. ❌ • Wrong because sysprep resets system-specific configurations, and Defender for Endpoint needs unique identifiers.

upvoted 1 times

...

Roee1

7 months, 1 week ago

Selected Answer: A

Acording to my knowlege and my friend chat gpt A is the correct answer

upvoted 1 times

...

WILLYPUMPKIN

7 months, 1 week ago

Selected Answer: B

Answer is B Microsoft recommends adding the Microsoft Defender for Endpoint onboarding script to the AVD golden image. This way, you can be sure that this onboarding script runs immediately at first boot. It's executed as a startup script at first boot on all the AVD machines that are provisioned from the AVD golden image. The placement and configuration of the VDI onboarding startup script on the AVD golden image configures it as a startup script that runs when the AVD starts. It's NOT recommended to onboard the actual AVD golden image. https://learn.microsoft.com/en-us/defender-endpoint/onboard-windows-multi-session-device

upvoted 2 times

...

sKostas

7 months, 2 weeks ago

Selected Answer: B

The following article clearly states that you should add the script in the image and run in at the first boot. I believe B is the right answer. https://learn.microsoft.com/en-us/defender-endpoint/onboard-windows-multi-session-device

upvoted 2 times

...

jeff1988

8 months, 2 weeks ago

Selected Answer: A

A. Run a Defender for Endpoint onboarding script on Image1, and then run sysprep. This method ensures that the onboarding script is included in the image and executed when the virtual machines are first started, effectively onboarding them to Microsoft Defender for Endpoint

upvoted 1 times

...

Bonesurfer

8 months, 3 weeks ago

Correct https://learn.microsoft.com/en-us/defender-endpoint/onboard-windows-multi-session-device

upvoted 2 times

jeff1988

8 months, 2 weeks ago

Option B, Add a Defender for Endpoint onboarding script to Image1, and then run the script at first start, is not the preferred method because it introduces additional steps and potential points of failure during the initial startup of each new session host. By running the onboarding script on Image1 and then running sysprep (Option A), you ensure that the onboarding process is baked into the image itself. This approach simplifies the deployment process and ensures that all session hosts are automatically onboarded to Microsoft Defender for Endpoint as soon as they are created from the image.

upvoted 1 times

...