Question 590
A desktop service owner wants to fix a profile share that still resolves publicly after adding an Azure Files private endpoint. Which change provides the requested capability?
Explanation
Correct Answer
Private DNS mapping is required for reliable private endpoint discovery. This addresses the stated need to fix a profile share that still resolves publicly after adding an Azure Files private endpoint without substituting a different control.
Incorrect Answers
Storage services encrypt persisted data at rest. This is relevant when the task is to ensure filesystem data on a managed storage service is encrypted while avoiding customer key management; it does not directly meet the requirement to fix a profile share that still resolves publicly after adding an Azure Files private endpoint.
Soft delete protects against accidental share deletion. This is relevant when the task is to recover a mistakenly deleted entire SMB file share within its configured retention interval; it does not directly meet the requirement to fix a profile share that still resolves publicly after adding an Azure Files private endpoint.
SMB encryption protects profile traffic during transfer. This is relevant when the task is to require encrypted file share data in flight between session host and Azure Files; it does not directly meet the requirement to fix a profile share that still resolves publicly after adding an Azure Files private endpoint.






Configuring and Operating Microsoft Azure Virtual Desktop (AZ-140) Practice Tests