AZ-140 — Configuring and Operating Microsoft Azure Virtual Desktop
Microsoft

Configuring and Operating Microsoft Azure Virtual Desktop (AZ-140) Practice Questions

★★★★★ 5.0 461 verified reviews
64 questions
June 10, 2026 updated
✓ Online quiz simulator

Domain coverage

  • Plan and implement an Azure Virtual Desktop infrastructure
  • Plan and implement identity and security
  • Plan and implement user environments and apps
  • Monitor and maintain an Azure Virtual Desktop infrastructure

Sample Questions (7 of 64 shown)

Q1 Plan and Implement an Azure Virtual Desktop Infrastructure (40%)
A company is planning an Azure Virtual Desktop rollout for users working from multiple branch offices. Before choosing VM sizes or host pool settings, what should the administrator assess first to avoid a poor user experience?
  1. The network capacity and latency between users and session hosts
  2. The number of Azure Policy assignments in the subscription
  3. Whether Azure Backup is enabled on the resource group
  4. The count of custom RBAC roles in Microsoft Entra ID
✓ Correct Answer: A
Network capacity and latency directly affect Azure Virtual Desktop responsiveness, especially for interactive desktop workloads. Microsoft's AZ-140 blueprint specifically calls out assessing network capacity and speed requirements before deeper infrastructure decisions are made. Without adequate bandwidth and low latency, even properly sized VMs will deliver a poor user experience.
Q2 Plan and Implement an Azure Virtual Desktop Infrastructure (40%)
Users in a branch office connect to pooled session hosts over a private WAN and need the lowest-latency path possible for Azure Virtual Desktop traffic. Which feature should you plan to use?
  1. Azure Bastion
  2. Remote Desktop Protocol (RDP) Shortpath
  3. Azure DDoS Protection
  4. Universal Print
✓ Correct Answer: B
RDP Shortpath is designed to reduce latency by establishing a direct UDP-based transport between the client and session host. For managed networks (private WAN), RDP Shortpath bypasses the Azure Virtual Desktop gateway for the media stream, significantly reducing latency. Azure Bastion provides secure administrative access to VMs. DDoS Protection guards against attacks. Universal Print provides cloud-based print infrastructure.
Q3 Plan and Implement an Azure Virtual Desktop Infrastructure (40%)
An organization wants to prioritize Azure Virtual Desktop real-time traffic on its internal network so voice and interactive session performance stay stable during congestion. What should be implemented with the network design?
  1. Quality of Service (QoS) policies
  2. Resource locks
  3. App attach packages
  4. FSLogix Office containers
✓ Correct Answer: A
QoS policies classify and prioritize traffic so latency-sensitive Azure Virtual Desktop flows (RDP media, audio, video) are treated appropriately during network congestion. The AZ-140 study guide explicitly pairs QoS planning with RDP Shortpath planning in the networking objective. Resource locks prevent accidental deletion. App attach enables dynamic application delivery. FSLogix manages user profiles.
Q4 Plan and Implement an Azure Virtual Desktop Infrastructure (40%)
You need Azure Virtual Desktop control-plane connectivity to stay off the public internet path and be reachable through private IPs inside your network design. Which solution should you plan?
  1. Azure Private Link for Azure Virtual Desktop
  2. A public load balancer in front of the host pool
  3. An Azure Storage static website endpoint
  4. A site-to-site VPN only
✓ Correct Answer: A
Azure Private Link enables you to expose supported Azure Virtual Desktop service components (workspace, host pool, and related resources) through private endpoints using private IP addresses within your VNet. A site-to-site VPN provides connectivity between networks but does not replace the service-specific private endpoint design that Private Link provides for AVD control-plane traffic.
Q5 Plan and Implement an Azure Virtual Desktop Infrastructure (40%)
A host pool is being deployed into a virtual network that already contains application servers and domain controllers. To reduce lateral exposure and apply targeted rules to session hosts, what should you recommend?
  1. Put session hosts in a dedicated subnet and apply appropriate network controls
  2. Use the default subnet for all Azure Virtual Desktop resources
  3. Place session hosts in a separate Microsoft Entra tenant
  4. Disable all NSGs so RDP Shortpath can function
✓ Correct Answer: A
A dedicated subnet for session hosts makes it easier to apply NSGs, route tables, and other controls specifically to Azure Virtual Desktop workloads. Mixing session hosts into shared subnets increases operational complexity, weakens segmentation, and makes it harder to apply targeted security controls. NSGs should be configured (not disabled) to allow only the required AVD ports while blocking unnecessary traffic.
Q6 Plan and Implement an Azure Virtual Desktop Infrastructure (40%)
You are designing Azure Virtual Desktop connectivity for users on the corporate LAN and want to support RDP Shortpath for managed networks. What prerequisite is most important?
  1. Direct line-of-sight network connectivity between client and session host over the private path
  2. A public IP on every session host NIC
  3. A separate application group for each user
  4. Premium SSD v2 disks on all profiles
✓ Correct Answer: A
RDP Shortpath for managed networks requires direct UDP connectivity between the client and session host over the private network path. This means the client must be able to route to the session host's IP address without NAT traversal. Public IPs on session hosts are NOT required (and would be a security concern). Application group assignment and disk types are unrelated.
Q7 Plan and Implement an Azure Virtual Desktop Infrastructure (40%)
An Azure Virtual Desktop deployment must support multimedia-heavy training sessions for hundreds of concurrent users. Which design choice matters most before host pool rollout?
  1. Sizing the session host network and user connectivity to meet bandwidth requirements
  2. Creating a separate workspace for each trainer
  3. Disabling Azure Monitor on the session hosts
  4. Enabling a delete lock on the resource group
✓ Correct Answer: A
High-concurrency multimedia workloads can saturate network links quickly. Bandwidth planning must happen before rollout — calculate the bandwidth per user for audio/video, multiply by concurrent users, and ensure the session hosts' NIC throughput and network infrastructure can handle the aggregate. Workspace count and resource locks do not solve the underlying throughput requirement.

You've viewed 3 of 64 questions. Start the free practice exam to answer all questions with instant feedback.

What Our Customers Say 461 verified reviews

5.0 ★★★★★ Based on 461 reviews
★★★★★★
Excellent value for AZ-140 prep. The lifetime access means I can always come back to review concepts when needed.
— Samantha L.
★★★★★★
I studied for AZ-140 with this bank and passed comfortably. The questions are well-organized and the UI is clean.
— Lauren C.
★★★★★★
I scored 890 on the AZ-140 exam. Went through about 80% of this question bank and it was more than enough to pass.
— Levi C.
★★★★★★
Recommended this to my entire study group for AZ-140. Four out of four passed. That says something.
— Audrey K.
★★★★★★
Passed the AZ-140 certification exam after studying this material for three weekends. Very efficient way to prepare.
— Xavier H.
★★★★★
Couldn’t have passed the AZ-140 exam without this. The questions are challenging, the explanations are thorough, and the value is unbeatable.
— Hannah L.

Log in to rate this exam and leave a review.

Submitted for moderation before publishing. Keep it helpful and respectful.

Frequently Asked Questions

The deepest pitfall is failing to master FSLogix profile redirection workflows at the registry level. The exam frequently challenges you on the architectural differences between standard profile containers, ODBC containers, and Cloud Cache multi-provider mirroring configurations — you must know which registry path controls each behavior. Another frequent stumbling block is Microsoft Teams optimization: you must know exactly how to deploy the WebRTC Redirector Service to offload audio/video media processing to the local client endpoint rather than overwhelming the multi-session Azure VM host. RDP Shortpath UDP connectivity troubleshooting and MSIX App Attach permission inheritance are also common failure points. Our practice questions reproduce these registry-level troubleshooting scenarios with detailed answer explanations that reference the exact FSLogix registry paths and AVD configuration documentation.

No. Microsoft Learn access is a documentation lookup tool, not a study replacement. The exam presents extensive configuration and troubleshooting scenarios where you must identify FSLogix registry path mismatches or App Attach script parameter errors. Because the exam clock continues while you browse and Ctrl+F page search is disabled, trying to look up basic answers dynamically will cause you to run out of time. You must know FSLogix registry paths, RDP Shortpath port requirements, and Autoscale scaling plan JSON schema from memory. Our practice test helps you memorize these details by presenting the same configuration scenarios you will face at the test center.

If your scaled score is under 700, a mandatory 24-hour waiting period must pass before you can book your second attempt. For a third, fourth, or fifth attempt, you must wait exactly 14 days between each consecutive registration. Microsoft caps you at five attempts within any rolling 12-month window, and each retake requires full payment of the $165 exam fee. Because AZ-140 is a specialty-level exam with a smaller candidate pool, rescheduling may take longer than for associate-level exams. Our mock exam helps you identify knowledge gaps before using an attempt by reproducing the exact question formats and difficulty level of the real exam.

Like all Microsoft role-based and specialty credentials, the certification is valid for exactly one year from your exam date. To renew it for an additional year at zero cost, you must pass an online, open-book renewal assessment on Microsoft Learn within the 180-day window preceding your credential's exact expiration date. The renewal assessment covers only the features added in the past year, such as new Autoscale capabilities or AVD Insights workbook updates. Our practice materials include a dedicated FAQ section explaining the renewal process, and the downloadable PDF includes a timeline checklist to help you track your certification expiration date.

Our mock exam reproduces the AZ-140 question formats: single-choice, multiple-response, drag-and-drop sequencing, hot area architecture templates, dropdown PowerShell/CLI script completions, and 1–2 extended case studies with enterprise remote-work constraint matrices. The practice test presents scenario questions that require you to configure FSLogix Cloud Cache multi-provider mirroring, optimize RDP Shortpath for UDP flow, deploy MSIX App Attach packages with correct permissions, and interpret Azure Monitor AVD Insights workbook metrics — the same skills measured in the real exam. Each question includes a detailed explanation that walks through the configuration logic and references the relevant AVD documentation.

Yes, the complete question bank is available as a downloadable PDF that packages all four domains in the same weighted distribution as the real exam. The PDF includes detailed answer explanations with references to official Azure and FSLogix documentation, Azure VM Image Builder template examples, and Azure Monitor AVD Insights KQL query samples. The PDF also contains step-by-step configuration guides for FSLogix Cloud Cache setup, RDP Shortpath UDP port requirements, Autoscale host pool scaling plan JSON syntax, and Azure Bastion JIT VM access configuration — all formatted for offline review during commutes or in environments without internet access.

Deploy a small AVD environment: create a pooled host pool with a custom image from Azure Compute Gallery, configure Azure Files with NTFS permissions for FSLogix profile containers, and enable Cloud Cache with two storage providers for cross-region resilience. Configure RDP Shortpath for UDP optimization and verify connectivity using the AVD Connection Quality indicator. Deploy Microsoft Teams with the WebRTC Redirector Service and verify that audio/video processing is offloaded to the local client. When you can complete a full FSLogix troubleshooting scenario — identifying why a profile container fails to mount by checking VHDLocation permissions, Cloud Cache provider order, and ODBC registry paths — without referencing documentation, the AZ-140 scenario questions become straightforward applications of your hands-on experience.

Free Study Resources

Community-verified analysis of 90 topics from real test-taker discussions — 16 deep analyses and 0 FAQs.