ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam AZ-140 All Questions

View all questions & answers for the AZ-140 exam
Go to Exam

Exam AZ-140 topic 2 question 26 discussion

Actual exam question from Microsoft's AZ-140
Question #: 26
Topic #: 2
[All AZ-140 Questions]

HOTSPOT -
You have an Azure subscription named Subscription1 that contains the users shown in the following table.

Subscription1 contains the Azure Virtual Desktop host pools shown in the following table.

Subscription1 contains the Azure Virtual Desktop application groups shown in the following table.

You perform the role assignments shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
Box 1: Yes -
The P1-0.contoso.com session host is in Pool1.
Group1 has the Desktop Virtualization User Session Operator role for Pool1.
User1 is member of Group1.
Desktop Virtualization User Session Operator
The Desktop Virtualization User Session Operator role allows users to send messages, disconnect sessions, and use the "logoff" function to sign sessions out of the session host. However, this role doesn't let users perform session host management like removing session host, changing drain mode, and so on. This role can see assignments, but can't modify admins. We recommend you assign this role to specific host pools. If you give this permission at a resource group level, the admin will have read permission on all host pools under a resource group.

Box 2: No -
User2 is member of Group2 and Group3. Those do not give access to the P1-0.contoso.com session host in Pool1.

Box 3: Yes -
User2, as a member of Group3, is a Desktop Virtualization User for AppGroup2. Pool2 is in AppGroup2. The P2-0.contoso.com session host is in Pool2.

Desktop Virtualization User -
The Desktop Virtualization User role allows users to use the applications in an application group.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-desktop/rbac
by calciumkid at Sept. 2, 2022, 7:17 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
calciumkid
Highly Voted 1 year, 7 months ago
This appears wrong, Desktop Virtualization User Session Operator does not contain the required "Microsoft.DesktopVirtualization/applicationGroups/useApplications/action" permission to allow login/utilisation of an app group. Should be NNY.
upvoted 9 times
tiger_03
1 year, 6 months ago
But 'Virtual Machine User Login' role is assigned directly to the P1 session host. So shouldnt the answer be YNY
upvoted 17 times
Magis
1 year, 5 months ago
Good cache! Agree with YNY for this reason. Qestion answer is correct. Just an explanation is wrong for the first point.
upvoted 4 times
zukako
1 year, 1 month ago
User2 cannot have appropriate role for p2 so, YNN
upvoted 5 times
picho707
9 months, 2 weeks ago
I think you are correct. The MS Assessment test has a question of what role is needed to log in to a session host pool. The choices are "Desktop Virtualization User" and "Virtual Machine User Login". MS answer is "Virtual Machine User Login" because you need to log in to the desktop of the session host. It will be a different story if the Application Group Type were "RemoteApp".
upvoted 1 times
...
Load full discussion...
...
...
...
Mtimmermans
1 year, 6 months ago
Agree, see https://learn.microsoft.com/en-us/azure/virtual-desktop/rbac for more information about the role.
upvoted 2 times
...
...
97cbe9c
Most Recent 2 months, 1 week ago
Y/N/N because you need virtual machine user login role to connect to an AVD host or am i wrong? so only User1 has that role
upvoted 1 times
...
RDIO
6 months, 3 weeks ago
Y/N/Y https://learn.microsoft.com/en-us/azure/virtual-desktop/rbac#desktop-virtualization-user
upvoted 1 times
...
vipjason
7 months ago
It should be NNY. Neither user has access to pool 1 while both users have acccess to pool 2. The question ask about user 2's access to pool 2 which is YES.
upvoted 2 times
...
mcclane654
7 months ago
NNN I would say all of them is NO after testing in my lab. Virtual Machine User Login is required to get access to an remoteapp/desktop. Desktop Virtualization User - this permission is automaticly assigned when you assign a user to an application group. This means User 1would be able to log into pool 1 due to group 1, however only have pool 2 assigned via group 3. Therefore Question one: NO User 2 is assigned Pool 2. but lack virtual machine user login rights. Meaning both last questions are NO the two other roles are more admin?
upvoted 1 times
...
c7d45f4
7 months, 2 weeks ago
Yes, User1 is a member of Groupl and has been assigned the "Desktop Virtualization Reader" role for Pool1. This role allows them to view information about the session hosts and resources in Pool1. No, User2 is not assigned any specific role for Pool1. Without an assigned role or group membership that grants access to Pool1, User2 will not be able to connect to the P1-O.contoso.com session host. No, similar to the previous statement, User2 is not assigned any specific role for Pool2 (P2-O.contoso.com), and therefore, User2 will not be able to connect to the P2-O.contoso.com session host. Y N N
upvoted 2 times
...
Lapiduse
8 months, 3 weeks ago
Where is Group 2 in the questions??
upvoted 2 times
...
vuphongtran
1 year, 1 month ago
The answers are right but the explanation is a bit confusing. 1 & 3 are yes but they are in different ways: 1 is using regular rdp (or bastion), not avd - 3 is using the published desktop appgroup2 in avd
upvoted 2 times
...
ZokiZokic2023
1 year, 2 months ago
Answers are correct: https://learn.microsoft.com/en-us/azure/virtual-desktop/rbac#desktop-virtualization-user - Desktop Virtualization User: allows users to use the applications in an application group. - Virtual Machine User Login: view Virtual Machines in the portal and login as a regular user. - Desktop Virtualization User: allows users to use the applications in an application group. - Desktop Virtualization User Session Operator: allows users to send messages, disconnect sessions, and use the "logoff" function to sign sessions out of the session host.
upvoted 1 times
ZokiZokic2023
1 year, 2 months ago
- Desktop Virtualization Reader: allows users to view everything in the deployment, but doesn't let them make any changes.
upvoted 1 times
...
...
InsulT
1 year, 6 months ago
User 1 has Virtual Machine User Login assigned for that VM, so User 1 should be able to login to that resource, right? Virtual Machine User Login: Microsoft.Compute/virtualMachines/login/action Log in to a virtual machine as a regular user
upvoted 1 times
...
Houssemonline
1 year, 7 months ago
IT'S TRUE YNY
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago