Plan and implement an Azure Virtual Desktop infrastructure

A financial services company is deploying a pooled AVD host pool that will support 900 concurrent knowledge workers. FSLogix profile containers must be stored on Azure NetApp Files (ANF). During pilot testing with the Standard service level, users report slow logon times and profile load latency during the 8:00 AM login storm, even though the volume has plenty of free capacity. You must improve profile performance during peak logon periods while keeping the ANF capacity pool at the minimum viable size. What should you do?

Your company runs an Azure Virtual Desktop pooled host pool on Windows 11 multi-session, using FSLogix profile containers stored on an Azure NetApp Files (ANF) volume. The infrastructure team wants to co-host a separate departmental data share on the SAME ANF capacity pool that must be simultaneously accessible from both the Windows session hosts (SMB) and a set of Linux analytics VMs (NFSv3), with a single identity source for permissions. Which ANF configuration meets the requirement while keeping FSLogix on a supported protocol?

You are designing a pooled AVD host pool that uses a golden image from Azure Compute Gallery. All user state is redirected to FSLogix profile containers on Azure Files, so the session-host OS disks contain no persistent data. Management wants to minimize per-VM storage cost and reduce OS disk read/write latency for these stateless session hosts, and they accept that reimaging replaces the OS disk. Which OS disk configuration should you choose for the session hosts?

Contoso is deploying a pooled AVD host pool for 400 concurrent users in the East US region. Users run data-heavy line-of-business apps and require FSLogix profile containers with very low latency and high, consistent IOPS. The storage design must support tens of thousands of IOPS with sub-millisecond latency and integrate with the existing Active Directory Domain Services. Which storage solution should you choose for the FSLogix profile containers?

A company is deploying an Azure Virtual Desktop pooled host pool for 200 concurrent users in the East US region. All session hosts and users are located in East US. The storage administrator wants a highly available profile storage solution that supports Active Directory authentication, offers a service-level agreement backed by Microsoft, and requires the least ongoing management overhead for a single-region deployment. Which storage option should you recommend for the FSLogix profile containers?

You are deploying FSLogix profile containers on an Azure Files share (SMB) joined to Active Directory Domain Services. Session hosts run in a pooled host pool, and profiles must be created and accessed only by the standard AVD users, while helpdesk administrators need full access for troubleshooting. According to Microsoft's recommended least-privilege configuration, which combination of Azure RBAC and NTFS permissions should you apply to the file share?

Your company stores FSLogix profile containers on an Azure Files premium share. Security requires that the storage account deny access from the public internet, but session hosts in the AVD subnet must still mount the share with low latency and no traffic traversing the internet. You want to avoid deploying additional resources such as private endpoints if a simpler option meets the requirement. What should you configure on the storage account?

Contoso runs a pooled host pool with 10 session hosts serving 400 kiosk-style users who each run a single lightweight line-of-business app. Sessions are short and users connect and disconnect frequently throughout the day. Support staff report that a few session hosts occasionally become overloaded while others sit nearly idle. You need to change the host pool configuration so that new user sessions are distributed as evenly as possible across all available session hosts to smooth out the load. Which load-balancing setting should you configure on the host pool?

You manage a pooled host pool named HP-Finance with 10 session hosts, each sized to comfortably support 15 concurrent users. The business wants to minimize the number of running session hosts during working hours to reduce compute costs, packing users onto as few hosts as possible before new hosts receive connections. You have already configured a scaling plan. Which host pool load-balancing and session-limit configuration best achieves this goal?

You are planning a pooled host pool for a production line-of-business workload that serves 500 users in the East US region. Management requires that the deployment tolerate a single datacenter failure without a complete outage, while keeping all session hosts in the same region for latency and data residency reasons. Which approach should you use when deploying the session host VMs?

You are planning a pooled multi-session AVD host pool for 200 knowledge workers who run Microsoft 365 apps, multiple browser tabs, and Teams. Load testing shows the workload is memory-bound long before CPU saturation is reached, and per-user memory footprint is high due to numerous concurrent sessions. You must choose an Azure VM family that provides the best price-to-performance balance for this scenario while avoiding wasted compute. Which VM series should you select for the session hosts?

You are planning a new pooled host pool for Contoso's finance department. Security policy requires that all session hosts support Secure Boot and virtual TPM (vTPM) to enable Trusted Launch. You intend to deploy the session hosts from a Windows 11 Enterprise multi-session image stored in an Azure Compute Gallery. When you configure the image version and select the VM size for the session hosts, which combination ensures the session hosts can be deployed with Trusted Launch enabled?

Your company maintains a custom Windows 11 Enterprise multi-session image for Azure Virtual Desktop using Azure VM Image Builder (AIB). The image is distributed to an Azure Compute Gallery image definition. Monthly, you must patch the image and roll out the update to session hosts without disrupting users currently connected to the existing hosts. You also want to be able to roll back to a previous known-good build if the new image causes application failures. Which approach best meets these requirements?

You are planning session hosts for a pooled multi-session host pool that will run a graphics-and-database line-of-business application. Users report that during peak morning logon storms the application is slow to launch, and monitoring shows sustained high disk queue depth on the session host OS disks. FSLogix profiles are already stored on Azure NetApp Files, so profile I/O is not the issue. You must improve local disk performance for the session hosts while keeping cost predictable and avoiding per-transaction billing. Which OS disk configuration should you choose for the session host VMs?

Your company is standardizing session host images using Azure VM Image Builder (AIB). The build template must download configuration scripts from an existing Azure Storage account (blob container) during the customization phase and then distribute the finished image to an Azure Compute Gallery. The security team refuses to allow AIB to use a service principal with stored credentials. What is the correct approach to grant Image Builder the permissions it needs?

Your organization has enabled RDP Shortpath for managed networks so that AVD session traffic flows over UDP. Users on a congested WAN link report choppy audio and laggy screen updates during peak hours. Network engineers want to prioritize the AVD real-time traffic across QoS-enabled routers. What must you configure so that AVD UDP traffic is correctly tagged for QoS prioritization end to end?

A network administrator has deployed RDP Shortpath for managed networks by opening UDP port 3390 on the session hosts and configuring the required Group Policy. Users report their sessions are working, but the administrator must confirm which transport each active session is actually using. From within an active AVD session, where can the user or administrator verify whether the connection is using UDP (Shortpath) or falling back to TCP?

You are automating the deployment of additional session hosts into an existing pooled host pool named HP-Prod using an ARM template that runs the Microsoft.DesktopVirtualization VM extension. The deployment fails with an authentication error when the new VMs attempt to join the host pool. You confirm the VM SKU, image, and domain join all succeed. What is the most likely cause of the failure?

You manage a pooled AVD host pool with 10 session hosts serving 200 users. You need to apply an out-of-band security patch to three session hosts during business hours. The patch requires a reboot, but you must prevent new user connections from landing on those three hosts while allowing users already connected to keep working until they naturally log off. What should you do first?

Your company is deploying a pooled AVD host pool to support engineers who use GPU-accelerated CAD applications. You have selected the NCasT4_v3-series VM size for the session hosts. After provisioning the session hosts from a standard Windows 11 Enterprise multi-session image, users report that the applications run slowly and do not appear to use the GPU. What must you do to enable GPU acceleration for the session hosts?