Microsoft Exam AZ-140 Topic 3 Question 87 Discussion

Actual exam question for Microsoft's AZ-140 exam

Question #: 87
Topic #: 3

[All AZ-140 Questions]

You have an Azure Virtual Desktop deployment.

You plan to create a new host pool named Pool1 that will contain five Windows 11 session hosts.

You need to enable secure boot and vTPM on the session hosts.

How should you configure the Virtual Machines settings?

AEnable encryption at rest and a platform-managed key.

BSet Security type to Trusted launch virtual machines.

CEnable a system-assigned managed identity.

DSet Network security group to Advanced.

Show Suggested Answer

Suggested Answer: A

by Elmira at Dec 08, 2024, 01:12 PM

Limited Time Offer

25%

Off

Get Premium AZ-140 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Felicia

1 months ago

I heard Microsoft is working on a new Azure Virtual Desktop feature called 'Trusted Laugh' for all the jokes in the exam questions.

upvoted 0 times

...

Avery

1 months ago

Encryption at rest? Really? That's for data protection, not enabling hardware security features. B is the winner for sure.

upvoted 0 times

Kristel

11 days ago

Definitely, B is the way to go for configuring the Virtual Machines settings in this case.

upvoted 0 times

...

Chau

13 days ago

I agree, setting Security type to Trusted launch virtual machines will enable secure boot and vTPM on the session hosts.

upvoted 0 times

...

Jessenia

17 days ago

Encryption at rest is not the same as enabling secure boot and vTPM. B is the correct choice.

upvoted 0 times

...

Stephaine

2 months ago

Haha, D is just ridiculous. Network security groups? Come on, that's not even close to the right answer.

upvoted 0 times

Kayleigh

17 days ago

C) Enable a system-assigned managed identity.

upvoted 0 times

...

Cathrine

23 days ago

B) Set Security type to Trusted launch virtual machines.

upvoted 0 times

...

Elouise

1 months ago

A) Enable encryption at rest and a platform-managed key.

upvoted 0 times

...

Eun

2 months ago

I bet Option C is just a distraction. Managed identities have nothing to do with secure boot or vTPM.

upvoted 0 times

Cory

13 days ago

D) Set Network security group to Advanced.

upvoted 0 times

...

Cathern

18 days ago

C) Enable a system-assigned managed identity.

upvoted 0 times

...

Timmy

21 days ago

B) Set Security type to Trusted launch virtual machines.

upvoted 0 times

...

Arlyne

2 months ago

A) Enable encryption at rest and a platform-managed key.

upvoted 0 times

...

Lashawnda

2 months ago

B seems like the right choice here. Trusted launch VMs are the way to go for enabling secure boot and vTPM.

upvoted 0 times

Scarlet

2 months ago

User2: Definitely, trusted launch virtual machines are the best choice for this scenario.

upvoted 0 times

...

Ashlee

2 months ago

User1: I agree, option B is the way to go for enabling secure boot and vTPM.

upvoted 0 times

...

Pearly

2 months ago

I'm not sure about that. I think enabling encryption at rest and a platform-managed key might be a better option for security.

upvoted 0 times

...

James

3 months ago

I agree with Carlee. Setting Security type to Trusted launch virtual machines sounds like the right configuration for this scenario.

upvoted 0 times

...

Carlee

3 months ago

I think we should set Security type to Trusted launch virtual machines for secure boot and vTPM.

upvoted 0 times

...