Your network contains an on-premises Active Directory domain named contoso.com that syncs to an Azure Active Directory (Azure AD) tenant.
You have an Azure subscription that contains an Azure Virtual Desktop host pool.
You create an Azure Storage account named storage1.
You need to use FSLogix profile containers in storage1 to store user profiles for a group named Group1. The solution must use the principle of least privilege.
What should you include in the solution? To answer, select the appropriate options in the answer area.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Windows Virtual Desktop host pool that contains five session hosts. The session hosts run Windows 10 Enterprise multi-session.
You need to prevent users from accessing the internet from Windows Virtual Desktop sessions. The session hosts must be allowed to access all the required Microsoft services.
Solution: You configure rules in the network security group (NSG) linked to the subnet of the session hosts.
Does that meet the goal?

HOTSPOT
-
You have an Azure subscription that contains a user named User1.
The subscription uses the Azure Virtual Desktop host pools shown in the following table.
You need to ensure that User1 can create RemoteApp app groups that will be used to stream a suite of custom apps from the host pools. The solution must meet the following requirements:
* The apps must be available to the users in all the pools.
* The principle of least privilege must be followed.
* Administrative effort must be minimized.
Which role should you assign to User1, and what is the minimum number of app groups that User1 should create? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Which two roles should you assign to Admin1 to meet the security requirements? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

You need to ensure the resiliency of the user profiles for the Boston office users. The solution must meet the user performance requirements.
What should you do?