AZ-140 · Question #203
You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. You plan to create a Windows 10 image named Image1 to deploy new session hosts to Pool1. You need to ensure that…
The correct answer is B. Add a Defender for Endpoint onboarding script to image1, and then run the script at first start. Running the onboarding script before sysprep (Option A) would strip the Defender for Endpoint registration during the generalization process, so each deployed VM would not be onboarded. The correct approach is to embed the onboarding script in the image and configure it to…
Question
You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. You plan to create a Windows 10 image named Image1 to deploy new session hosts to Pool1. You need to ensure that all the new session hosts deployed by using Image1 are onboarded to Microsoft Defender for Endpoint. What should you do?
Options
- ARun a Defender for Endpoint onboarding script on Image1, and then run sysprep.
- BAdd a Defender for Endpoint onboarding script to image1, and then run the script at first start.
- CCreate an MSIX package for Pool1.
- DCreate an automation task for Pool1.
How the community answered
(23 responses)- A9% (2)
- B74% (17)
- C13% (3)
- D4% (1)
Explanation
Running the onboarding script before sysprep (Option A) would strip the Defender for Endpoint registration during the generalization process, so each deployed VM would not be onboarded. The correct approach is to embed the onboarding script in the image and configure it to execute on first boot after deployment (Option B). This ensures every new session host registers with Defender for Endpoint as soon as it starts, without requiring manual intervention. MSIX packages (C) handle application delivery, and automation tasks (D) are unrelated to endpoint security onboarding.
Topics
Community Discussion
No community discussion yet for this question.