Fundamental
Prepare and test your skills
Fundamental
Prepare and test your skills
Secure Multi-Session Windows Desktops with Azure Virtual Desktop
Free sample question, answered and explained below. The AZ-900 Microsoft Azure Fundamentals Exam practice bank has 688 more like it. Try 10 free: instant score, no account.
An enterprise organization is transitioning to a hybrid work model where employees work remotely from various locations and personal devices. The IT department needs a cloud-based solution that provides employees with secure remote access to full Windows desktops and individual published applications, while enabling centralized management and multi-session capabilities to optimize virtual machine costs.
Which Azure service should the organization implement to meet these requirements?
Explanations
Azure Virtual Desktop
Azure Virtual Desktop
What Azure Virtual Desktop Is
Azure Virtual Desktop (AVD) is a comprehensive desktop and application virtualization service hosted entirely on Microsoft Azure. It delivers cloud-based virtual desktop infrastructure (VDI) that allows users to access virtualized Windows desktops and corporate applications from virtually any endpoint device and location.
How It Meets the Requirements
- Remote Desktop & App Delivery: Azure Virtual Desktop delivers full Windows 10 and Windows 11 desktop environments as well as individual published applications (RemoteApps) securely over the internet.
- Multi-Session Optimization: It provides exclusive support for Windows 10 and Windows 11 Enterprise multi-session, enabling multiple concurrent users to share a single Azure virtual machine while keeping individual user sessions completely isolated, significantly reducing infrastructure costs.
- Centralized Management: IT administrators centrally provision, patch, monitor, and manage user sessions, host pools, and security policies from the Azure portal.
Key Advantages and Capabilities
- Work from Anywhere: Employees can securely connect using Windows, macOS, iOS, Android, or HTML5 web browsers.
- Native Security Integration: Integrates directly with Microsoft Entra ID, multi-factor authentication (MFA), and Conditional Access policies.
- Scalable Host Pools: Easily scale compute resources dynamically using built-in autoscale capabilities based on workload demand.
- User Profile Management: Leverages FSLogix profile containers to deliver fast sign-in times and a seamless native desktop experience across shared VMs.
Why This Is Optimal
Azure Virtual Desktop eliminates the complexity and hardware overhead of traditional on-premises VDI solutions while uniquely supporting multi-session client operating systems in the cloud, offering the optimal balance of user experience, centralized control, and cost efficiency.
Azure Key Vault
Azure Key Vault
What Azure Key Vault Is
Azure Key Vault is a centralized cloud service used to securely store and access application secrets, encryption keys, and TLS/SSL certificates. It helps protect sensitive configuration data and enforces role-based access policies without exposing credentials in code.
Why It Doesn't Meet the Requirement
Azure Key Vault is a security and secrets management service, not a compute or virtualization solution. It cannot host virtual machines, deliver desktop operating systems, or manage remote application streaming.
Key Characteristics and Limitations
- Secrets and Key Management: Stores API keys, database connection strings, passwords, and cryptographic keys securely.
- No Execution Environment: Does not provide compute capacity, memory, or operating systems for hosting workloads.
- Complementary Security Component: Often used alongside virtualization environments to protect encryption keys, but cannot serve as a desktop platform itself.
This Answer Would Be Correct If
The organization needed a secure, centralized cloud repository to store encryption keys, digital certificates, and administrative passwords across Azure services.
Azure Virtual Machine Scale Sets
Azure Virtual Machine Scale Sets
What Azure Virtual Machine Scale Sets Is
Azure Virtual Machine Scale Sets (VMSS) is an Infrastructure-as-a-Service (IaaS) compute resource that lets you create and manage a group of identical, load-balanced virtual machines. Its primary purpose is to automatically increase or decrease the number of VM instances in response to application traffic or scheduled demand.
Why It Doesn't Meet the Requirement
While Virtual Machine Scale Sets are effective for scaling compute infrastructure, they do not provide a desktop virtualization control plane, remote workspace brokering, application publishing, or native end-user desktop streaming out of the box. They are designed for backend server workloads (such as web farms and API tiers) rather than interactive client desktop virtualization.
Key Characteristics and Limitations
- Designed for Stateless Backend Workloads: Best suited for scaling stateless web applications, batch processing, and container worker nodes.
- No Built-in Desktop Gateway: Lacks the connection broker, gateway services, and web client portal necessary to host interactive end-user desktop sessions.
- No Multi-Session Client OS Support: Does not manage user profiles or multi-session client Windows virtualization features like Azure Virtual Desktop does.
This Answer Would Be Correct If
The organization needed to automatically deploy and scale identical virtual machines to handle fluctuating web server traffic or backend compute processing workloads.
Azure SQL Managed Instance
Azure SQL Managed Instance
What Azure SQL Managed Instance Is
Azure SQL Managed Instance is an intelligent, scalable Platform-as-a-Service (PaaS) database engine that provides nearly 100% feature compatibility with the latest Microsoft SQL Server database engine. It includes native virtual network integration, built-in high availability, and automated maintenance.
Why It Doesn't Meet the Requirement
Azure SQL Managed Instance is strictly a relational database management service. It has no capability to host operating systems, publish client applications, or deliver virtual desktop experiences to end users.
Key Characteristics and Limitations
- Database Engine Only: Serves exclusively as a PaaS backend for structured data storage and database operations.
- No User Interface / Compute Hosting: Cannot run interactive desktop sessions, user applications, or virtual machine operating systems.
- Optimized for Lift-and-Shift Databases: Designed to migrate existing SQL Server instances to the cloud with minimal code changes.
This Answer Would Be Correct If
The scenario required migrating on-premises SQL Server databases to a fully managed Azure PaaS service with minimal architectural modification and native virtual network support.
Try 10 interactive questions like this one, free
Answer them yourself and get your score the moment you finish. No account needed.
Full access includes
- 688 practice questions across all 3 exam domains
- Every answer explained: why it is right, and why the others are not
- Scout, an AI tutor that answers your follow-up questions
- Readiness tracking by domain, so you know when to book the exam
Related questions
Keep the momentum going with these hand-picked practice scenarios
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Virtual Machine Scale Sets
Describe virtual machine options, including Azure virtual machines, Azure Virtual Machine Scale Sets, availability sets, and Azure Virtual Desktop
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Virtual Machines IaaS
Describe virtual machine options, including Azure virtual machines, Azure Virtual Machine Scale Sets, availability sets, and Azure Virtual Desktop
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Virtual Machine Scale Sets
Describe virtual machine options, including Azure virtual machines, Azure Virtual Machine Scale Sets, availability sets, and Azure Virtual Desktop
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Availability Sets
Describe virtual machine options, including Azure virtual machines, Azure Virtual Machine Scale Sets, availability sets, and Azure Virtual Desktop
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Microsoft Defender for Cloud Security Posture Management
Describe infrastructure as a service (IaaS)
ExpertAZ-500 Microsoft Azure Security Technologies Exam
Application Permissions vs Delegated Permissions
Configure app registration permission scopes
Last updated Validated