Microsoft Certified Azure Virtual Desktop Specialty · Free Practice Question Medium
Question 5
Your company has an on-premises domain named azuit.com. User identities replicate from Windows AD to Entra ID using Microsoft Entra Connect. The company has an Azure network in place with no connectivity to the on-premises network. A portion of the network configuration is as follows:
- VNet02 address space: 10.0.0.0/16
- Region: West US 2
The users in the environment are:
- Admin1: Domain Admin, sourced from Windows AD
- Admin2: Domain Server Operator, sourced from Windows AD
- Cloud_User: User, sourced from Entra ID
Requirements:
- Implement a single Domain Controller in Azure for user authentication
- Ensure any modification adheres to the principle of least privileges
- Keep costs to a minimum
Admin2 should be assigned the Desktop Virtualization Session Host Operator RBAC role to manage session hosts, including putting the session hosts in drain mode and adding/removing session hosts from the host pool.
Does this satisfy the requirements for Admin2?
-
A
Yes
-
B
No
Reveal correct answer
Correct answer: B
B.
The role of the Desktop Virtualization Session Host Operator allows for viewing and removing session hosts and changing the drain mode. However, the operator does not have permission to add session hosts to the host pool due to a lack of write permission for host pool objects.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
