Hotspot Question
Your company has the offices shown in the following table.

The company has an Azure Active Directory (Azure AD) tenant named contoso.com that contains a user named User1.
Users connect to a Azure Virtual Desktop deployment named WVD1. WVD1 contains session hosts that have public IP addresses from the 52.166.253.0/24 subnet.
Contoso.com has a conditional access policy that has the following settings:
Name: Policy1
Assignments:
- Users and groups: User1
- Cloud apps or actions: Azure Virtual Desktop
Access controls:
- Grant: Grant access, Require multi-factor authentication
Enable policy: On
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

You have an Azure Virtual Desktop host pool in the US East Azure region.
You need to ensure that the host pool can fail over to the US West Azure region.
What should you do first?

You have an Azure subscription that contains an Azure Compute Gallery named Gallery1 and a virtual machine named Template1. Template1 has custom apps and settings configured.
You plan to deploy Azure Virtual Desktop session hosts by using a custom virtual machine image.
The solution must meet the following requirements:
- The custom image must be stored in Gallery1.
- The custom image must be based on Template1.
- All new session hosts must have unique computer names and
identifiers.
You need to create the custom image.
What should you do in the Azure portal?

You have a storage account named storage1 that contains FSLogix profile containers. In the East US region, you have an Azure compute gallery named SIG1 that contains a virtual machine image named Image1. Image1 is used to create new session hosts in Pool1.
You plan to deploy a new Azure Virtual Desktop host pool named Pool2 to the South India region.
You need to implement a session host deployment solution for Pool2 that meets the following requirements:
- Image1 must replicate to the South India region.
- The session hosts in Pool2 must be based on Image1.
- Changes to Image1 must be available in the South India and East US
regions.
What should you include in the solution?

Case Study 3 - Northwind Traders
Overview
Northwind Traders is a manufacturing company based in New York City.
Existing Environment
Identity Environment
The on-premises network contains an Active Directory Domain Services (AD DS) domain named northwindtraders.com.
Northwind Traders has a Microsoft Entra tenant and a Microsoft Entra Domain Services managed domain. The northwindtraders.com domain syncs with the Microsoft Entra tenant.
Virtual Machines
The company has an on-premises Hyper-V virtual machine named VM1 that has the following configurations:
- Generation: 1
- Disk size: 2 TB
- Disk format: VHDX
- Disk type: Dynamically expanding
Cloud Services
Northwind Traders has a Microsoft 365 E5 subscription. The subscription contains 500 users that are assigned Microsoft 365 E5 licenses.
The company has an Azure subscription that contains the resources shown in the following table.

Both subscriptions are linked to the Microsoft Entra tenant.
Requirements
Planned Changes
Northwind Traders identifies the following planned changes:
- Deploy an Azure Virtual Desktop host pool that will contain 10 session hosts joined to the Microsoft Entra Domain Services managed domain.
- Configure VM1 as the source image for the Azure Virtual Desktop deployment and upload the image to Azure.
- The Azure Virtual Desktop deployment will provide access to a custom app named App1.
Performance Requirements
Northwind Traders identifies the following performance requirements:
- Each Azure Virtual Desktop session host must support 15 user sessions.
- Each new user session must be assigned to a single session host until the maximum session limit is reached for that host.
Application Requirements
Northwind Traders identifies the following application requirements:
- Microsoft OneDrive must launch when users connect to a RemoteApp session in Azure Virtual Desktop.
- App1 requires a desktop resolution of 1280 x 1024.
- Administrative effort must be minimized.
Disaster Recovery Requirements
Northwind Traders identifies the following disaster recovery requirements for the Azure Virtual Desktop deployment:
- Minimize outages if an Azure region fails.
- Minimize the recovery time objective (RTO).
- Minimize administrative effort in the event of a failover.
Security Requirements
Northwind Traders identifies the following security requirements:
- When users sign in to the Azure Virtual Desktop deployment by using the Azure Virtual Desktop client, they must authenticate by using their Microsoft Entra username and password only.
- When users sign in to the Azure Virtual Desktop deployment by using a web browser, they must authenticate by using the Microsoft Authenticator app.
- All the Azure Virtual Desktop session hosts deployed by using the VM1 source image must be onboarded to Microsoft Defender for Endpoint.
- The client version and operating system used to connect to the session hosts must be logged.
- The solution must follow the principle of least privilege.
Networking Requirements
The Azure Virtual Desktop session hosts must be able to access the resources on the on- premises network.
User Profile Requirements
Northwind Traders identifies the following user profile requirements:
- Users must be able to access share1 by using their Microsoft Entra account.
- Azure Virtual Desktop user profiles must be managed by using FSLogix.
- All user profiles must be stored in share1.
What should you configure to meet the networking requirements?