AZ-140 · Question #293
You have an Azure subscription that contains an Azure Virtual Desktop deployment and a Microsoft Entra Domain Services domain. The deployment contains 10 session hosts that are joined to the domain…
The correct answer is A. From the Data storage settings of the storage account, enable an identity source. D. Create a premium file shares storage account. To store FSLogix profile containers in Azure and allow share permissions to be assigned to Microsoft Entra accounts, you must first enable an identity source on the storage account and then create a high-performance Azure Files Premium share.
Question
You have an Azure subscription that contains an Azure Virtual Desktop deployment and a Microsoft Entra Domain Services domain. The deployment contains 10 session hosts that are joined to the domain. You plan to deploy FSLogix profile containers and store the containers in Azure. You need to configure storage for the containers. The solution must ensure that you can assign share permissions to Microsoft Entra accounts. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
Options
- AFrom the Data storage settings of the storage account, enable an identity source.
- BAttach a new virtual disk to each session host.
- CFrom the Configuration settings of the storage account, select Default to Microsoft Entra
- DCreate a premium file shares storage account.
- ECreate a premium block blobs storage account.
How the community answered
(42 responses)- A79% (33)
- B5% (2)
- C12% (5)
- E5% (2)
Why each option
To store FSLogix profile containers in Azure and allow share permissions to be assigned to Microsoft Entra accounts, you must first enable an identity source on the storage account and then create a high-performance Azure Files Premium share.
Enabling an identity source, such as Active Directory Domain Services or Microsoft Entra Domain Services, on the storage account allows for Microsoft Entra based authentication and authorization to Azure file shares, which is necessary to assign share permissions to Microsoft Entra accounts.
Attaching a new virtual disk to each session host provides local storage, which is not suitable for shared, roaming FSLogix profiles that need to be accessible from multiple session hosts.
There is no standard 'Default to Microsoft Entra' option in the storage account's 'Configuration' settings that directly enables Microsoft Entra authentication for file shares; the correct action is to enable an identity source under 'Data storage' or 'File shares' settings.
FSLogix profile containers require high-performance storage due to their intensive I/O operations, and Azure Files Premium tier, backed by SSDs, provides the necessary throughput and low latency for optimal user experience.
Premium block blobs are object storage, which uses an HTTP(S) interface and is not compatible with the SMB protocol required by FSLogix for profile containers.
Concept tested: Azure Files for FSLogix, Microsoft Entra authentication for file shares
Source: https://learn.microsoft.com/en-us/azure/virtual-desktop/create-host-pools-azure-files-active-directory-domain-services
Community Discussion
No community discussion yet for this question.