Question 40
The AVD reviewer evaluates: A regulated AVD deployment needs verification that protected components are reachable through intended private paths. Select TWO complementary choices: the recommended response AND the evidence that confirms it worked.
Explanation
Correct Answers
The test concerns: A regulated AVD deployment needs verification that protected components are reachable through intended private paths. Decisive evidence is: DNS inspection and connection tests show AVD traffic following approved private endpoint paths where supported. This confirms the intended correction (Configure supported Azure Virtual Desktop private endpoints, required private DNS resolution and associated network access for the intended AVD service resources.) and tests the failure risk: Creating a private endpoint without matching DNS and route configuration can make clients resolve an unreachable public or private address. Other healthy Azure resources or unrelated service telemetry would not, by themselves, establish success for this case.
The AVD operational observation is: A regulated AVD deployment needs verification that protected components are reachable through intended private paths. The most targeted response is: Configure supported Azure Virtual Desktop private endpoints, required private DNS resolution and associated network access for the intended AVD service resources. This addresses the specific failure mechanism: Creating a private endpoint without matching DNS and route configuration can make clients resolve an unreachable public or private address. Verify the outcome by checking: DNS inspection and connection tests show AVD traffic following approved private endpoint paths where supported. The chosen response directly resolves the stated requirement, rather than changing another Azure Virtual Desktop configuration area.
Incorrect Answers
This option relates to RDP Shortpath direct UDP transport under AZ-140 objective group 1.1. It addresses a different failure risk: Blocking UDP can force sessions to use fallback transport and worsen interactive latency for suitable network paths. But the observed requirement is: A regulated AVD deployment needs verification that protected components are reachable through intended private paths. For the targeted topic (Azure Private Link for AVD control-plane access), the directly relevant paired response and evidence is: DNS inspection and connection tests show AVD traffic following approved private endpoint paths where supported. That other measure may be useful in a separate environment, but does not by itself establish the specific requested outcome. An independent qualified Azure Virtual Desktop expert must adjudicate any plausible overlapping alternatives before release.
This option relates to RDP Multipath and QoS policy selection under AZ-140 objective group 1.1. It addresses a different failure risk: A transport policy applied without checking client support and network treatment may create no measurable benefit. But the observed requirement is: A regulated AVD deployment needs verification that protected components are reachable through intended private paths. For the targeted topic (Azure Private Link for AVD control-plane access), the directly relevant paired response and evidence is: DNS inspection and connection tests show AVD traffic following approved private endpoint paths where supported. That other measure may be useful in a separate environment, but does not by itself establish the specific requested outcome. An independent qualified Azure Virtual Desktop expert must adjudicate any plausible overlapping alternatives before release.
This option relates to Network throughput and session latency planning under AZ-140 objective group 1.1. It addresses a different failure risk: Sizing solely from VM CPU ignores client latency and bandwidth constraints that directly degrade interactive sessions. But the observed requirement is: A regulated AVD deployment needs verification that protected components are reachable through intended private paths. For the targeted topic (Azure Private Link for AVD control-plane access), the directly relevant paired response and evidence is: DNS inspection and connection tests show AVD traffic following approved private endpoint paths where supported. That other measure may be useful in a separate environment, but does not by itself establish the specific requested outcome. An independent qualified Azure Virtual Desktop expert must adjudicate any plausible overlapping alternatives before release.