You network contains an on-premises Active Directory domain. The domain contains a
universal security group named WVDusers.
You have a hybrid Azure Active Directory (Azure AD) tenant. WVDusers syncs to Azure
AD.
You have a Windows Virtual Desktop host pool that contains four Windows 10 Enterprise
multi-session hosts.
You need to ensure that only the members of WVDusers can establish Windows Virtual
Desktop sessions to the host pool.
What should you do?

You have a hybrid Azure Active Directory (Azure AD) tenant named contoso.com that contains the users shown in the following table.

You have a Windows Virtual Desktop host pool named Pool1 and an Azure Automation
account named account1. Pool1 is integrated with an Azure Active Directory Domain
Services (Azure AD DS) managed domain named contoso.com.
You plan to configure scaling for Pool1 by using Azure Automation runbooks.
You need to authorize the runbooks to manage the scaling of Pool1. The solution must
minimize administrative effort.
What should you configure?

You have a Windows Virtual Desktop host pool that runs Windows 10 Enterprise multisession.
You need to configure automatic scaling of the host pool to meet the following
requirements:
Distribute new user sessions across all running session hosts.
Automatically start a new session host when concurrent user sessions exceed 30 users per
host.
What should you include in the solution?

You have an Azure Active Directory (Azure AD) tenant named contoso.com.
You use a user account named Admin1 to deploy an Azure Active Directory Domain
Services (Azure AD DS) managed domain named aaddscontoso.com to a virtual network
named VNET1.
You plan to deploy an Azure Virtual Desktop host pool named Pool1 to VNET1.
You need to ensure that you can use the Admin1 user account to deploy Windows 10
Enterprise session hosts to Pool1.
What should you do first?

You need to modify the custom virtual machine images to meet the deployment
requirements. What should you install?

You have a Windows Virtual Desktop host pool named Pool1 and an Azure Storage
account named Storage1.
Storage1 stores FSLogix profile containers in a share folder named share1.
You create a new group named Group1. You provide Group1 with permission to sign in to
Pool1.
You need to ensure that the members of Group1 can store the FSLogix profile containers
in share1. The solution must use the principle of least privilege.
Which two privileges should you assign to Group1? Each correct answer presents part of
the solution.
NOTE: Each correct selection is worth one point.

Note: This question is part of a series of questions that present the same scenario.
Each question in the series contains a unique solution that might meet the stated
goals. Some question sets might have more than one correct solution, while others
might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a
result, these questions will not appear in the review screen.
You have the following:
A Microsoft 365 E5 tenant
An on-premises Active Directory domain
A hybrid Azure Active Directory (Azure AD) tenant
An Azure Active Directory Domain Services (Azure AD DS) managed domain
An Azure Virtual Desktop deployment
The Azure Virtual Desktop deployment contains personal desktops that are hybrid joined to
the on-premises domain and enrolled in Microsoft Intune.
You need to configure the security settings for the Microsoft Edge browsers on the
personal desktops.
Solution: You configure a configuration profile in Intune.
Does this meet the goal?