AZ-140 — Configuring and Operating Microsoft Azure Virtual Desktop
Microsoft

Configuring and Operating Microsoft Azure Virtual Desktop (AZ-140) Practice Questions

5.0 447 verified reviews
64 questions
June 10, 2026 updated
Online quiz simulator

Domain coverage

  • Plan and implement an Azure Virtual Desktop infrastructure
  • Plan and implement identity and security
  • Plan and implement user environments and apps
  • Monitor and maintain an Azure Virtual Desktop infrastructure

Sample Questions (7 of 64 shown)

Q1 Plan and Implement an Azure Virtual Desktop Infrastructure (40%)
A company is planning an Azure Virtual Desktop rollout for users working from multiple branch offices. Before choosing VM sizes or host pool settings, what should the administrator assess first to avoid a poor user experience?
  1. The network capacity and latency between users and session hosts
  2. The number of Azure Policy assignments in the subscription
  3. Whether Azure Backup is enabled on the resource group
  4. The count of custom RBAC roles in Microsoft Entra ID
✓ Correct Answer: A
Network capacity and latency directly affect Azure Virtual Desktop responsiveness, especially for interactive desktop workloads. Microsoft's AZ-140 blueprint specifically calls out assessing network capacity and speed requirements before deeper infrastructure decisions are made. Without adequate bandwidth and low latency, even properly sized VMs will deliver a poor user experience.
Q2 Plan and Implement an Azure Virtual Desktop Infrastructure (40%)
Users in a branch office connect to pooled session hosts over a private WAN and need the lowest-latency path possible for Azure Virtual Desktop traffic. Which feature should you plan to use?
  1. Azure Bastion
  2. Remote Desktop Protocol (RDP) Shortpath
  3. Azure DDoS Protection
  4. Universal Print
✓ Correct Answer: B
RDP Shortpath is designed to reduce latency by establishing a direct UDP-based transport between the client and session host. For managed networks (private WAN), RDP Shortpath bypasses the Azure Virtual Desktop gateway for the media stream, significantly reducing latency. Azure Bastion provides secure administrative access to VMs. DDoS Protection guards against attacks. Universal Print provides cloud-based print infrastructure.
Q3 Plan and Implement an Azure Virtual Desktop Infrastructure (40%)
An organization wants to prioritize Azure Virtual Desktop real-time traffic on its internal network so voice and interactive session performance stay stable during congestion. What should be implemented with the network design?
  1. Quality of Service (QoS) policies
  2. Resource locks
  3. App attach packages
  4. FSLogix Office containers
✓ Correct Answer: A
QoS policies classify and prioritize traffic so latency-sensitive Azure Virtual Desktop flows (RDP media, audio, video) are treated appropriately during network congestion. The AZ-140 study guide explicitly pairs QoS planning with RDP Shortpath planning in the networking objective. Resource locks prevent accidental deletion. App attach enables dynamic application delivery. FSLogix manages user profiles.
Q4 Plan and Implement an Azure Virtual Desktop Infrastructure (40%)
You need Azure Virtual Desktop control-plane connectivity to stay off the public internet path and be reachable through private IPs inside your network design. Which solution should you plan?
  1. Azure Private Link for Azure Virtual Desktop
  2. A public load balancer in front of the host pool
  3. An Azure Storage static website endpoint
  4. A site-to-site VPN only
✓ Correct Answer: A
Azure Private Link enables you to expose supported Azure Virtual Desktop service components (workspace, host pool, and related resources) through private endpoints using private IP addresses within your VNet. A site-to-site VPN provides connectivity between networks but does not replace the service-specific private endpoint design that Private Link provides for AVD control-plane traffic.
Q5 Plan and Implement an Azure Virtual Desktop Infrastructure (40%)
A host pool is being deployed into a virtual network that already contains application servers and domain controllers. To reduce lateral exposure and apply targeted rules to session hosts, what should you recommend?
  1. Put session hosts in a dedicated subnet and apply appropriate network controls
  2. Use the default subnet for all Azure Virtual Desktop resources
  3. Place session hosts in a separate Microsoft Entra tenant
  4. Disable all NSGs so RDP Shortpath can function
✓ Correct Answer: A
A dedicated subnet for session hosts makes it easier to apply NSGs, route tables, and other controls specifically to Azure Virtual Desktop workloads. Mixing session hosts into shared subnets increases operational complexity, weakens segmentation, and makes it harder to apply targeted security controls. NSGs should be configured (not disabled) to allow only the required AVD ports while blocking unnecessary traffic.
Q6 Plan and Implement an Azure Virtual Desktop Infrastructure (40%)
You are designing Azure Virtual Desktop connectivity for users on the corporate LAN and want to support RDP Shortpath for managed networks. What prerequisite is most important?
  1. Direct line-of-sight network connectivity between client and session host over the private path
  2. A public IP on every session host NIC
  3. A separate application group for each user
  4. Premium SSD v2 disks on all profiles
✓ Correct Answer: A
RDP Shortpath for managed networks requires direct UDP connectivity between the client and session host over the private network path. This means the client must be able to route to the session host's IP address without NAT traversal. Public IPs on session hosts are NOT required (and would be a security concern). Application group assignment and disk types are unrelated.
Q7 Plan and Implement an Azure Virtual Desktop Infrastructure (40%)
An Azure Virtual Desktop deployment must support multimedia-heavy training sessions for hundreds of concurrent users. Which design choice matters most before host pool rollout?
  1. Sizing the session host network and user connectivity to meet bandwidth requirements
  2. Creating a separate workspace for each trainer
  3. Disabling Azure Monitor on the session hosts
  4. Enabling a delete lock on the resource group
✓ Correct Answer: A
High-concurrency multimedia workloads can saturate network links quickly. Bandwidth planning must happen before rollout — calculate the bandwidth per user for audio/video, multiply by concurrent users, and ensure the session hosts' NIC throughput and network infrastructure can handle the aggregate. Workspace count and resource locks do not solve the underlying throughput requirement.

You've viewed 3 of 64 questions. Start the free practice exam to answer all questions with instant feedback.

Exam overview

Azure Virtual Desktop represents one of the most complex multi-layer services in the Microsoft cloud stack because it bridges Windows session hosting, profile containerization, application delivery, and network optimization all within a single remote-work platform. The exam code AZ-140 corresponds to the full title "Configuring and Operating Microsoft Azure Virtual Desktop," a specialty-level assessment that validates your ability to deploy and operate AVD at enterprise scale — not just click through the Azure portal, but make architectural decisions about host pool type, storage throughput, and user profile redirection that directly impact end-user performance. Unlike AZ-104 which tests general Azure administration, AZ-140 forces you to troubleshoot FSLogix registry paths, configure RDP Shortpath for UDP optimization, and deploy MSIX App Attach packages with correct permission inheritance.

Microsoft strongly recommends holding the AZ-104 Azure Administrator Associate credential before attempting this exam, and the reason becomes clear once you encounter the networking questions. You must configure ExpressRoute or VPN connectivity for AVD, establish proper UDRs and NSGs for session host subnets, and troubleshoot RDP Shortpath connectivity when the UDP flow is blocked by a firewall — all without referencing documentation. The official preparation course is AZ-140T00-A (4-day intermediate classroom training), and the 5-part Azure Free Learning Paths for Azure Virtual Desktop Specialty on Microsoft Learn walks through host pool design, FSLogix configuration, and Autoscale scaling plan deployment. Because this is a specialty exam, the case studies present multi-page enterprise remote-work constraint matrices where you must balance cost, performance, and compliance across multiple Azure regions.

Four domains shape the AZ-140 blueprint, with the heaviest weight on planning and implementing AVD infrastructure (40–45%). The remaining domains — identity and security (15–20%), user environments and apps (20–25%), and monitoring/maintenance (10–15%) — complete the assessment. A distinctive difficulty of this exam is the registry-level troubleshooting: you will see scenarios where a FSLogix profile container fails to mount, and you must identify whether the issue is a VHDLocation permission, a Cloud Cache provider order misconfiguration, or an Office Display Framework Container (ODFC) registry path conflict. The exam also tests MSIX App Attach deeply — you need to know the difference between image-based app delivery and dynamic app attach, and when to choose each approach for multi-session Windows 10/11 hosts.

The practice questions here mirror the four-domain distribution exactly, with scenario-based items that reproduce the enterprise remote-work constraint matrices you will face at the test center. Each question includes a detailed explanation that walks through the configuration logic — why a pooled host pool requires Autoscale with a scaling plan while a personal host pool uses start/stop schedules, how FSLogix Cloud Cache multi-provider mirroring provides cross-region resilience, and when to choose Azure NetApp Files over Azure Files for multi-session high-throughput profile access. The downloadable PDF packages the same question bank for offline review, so you can practice FSLogix registry path troubleshooting, RDP Shortpath UDP port configuration, and Azure Monitor AVD Insights workbook customization during commutes or in environments without reliable internet.

Official Exam Domains & Weighting

To successfully pass the AZ-140 exam, candidates must master the following core domains:
  • Domain 1: Plan and implement an Azure Virtual Desktop infrastructure — 40–45%
Covers storage planning for FSLogix components, Azure Storage Accounts, Azure Files, and Azure NetApp Files for multi-session high-throughput access. Network infrastructure topics include capacity planning, RDP Shortpath configuration for UDP optimization, ExpressRoute and VPN connectivity, and proper UDR and NSG configuration for session host subnets. Host pool and session host design covers pooled vs. personal host pool selection, session host image creation via Azure VM Image Builder, Azure Compute Gallery master image management, and ARM/Bicep template automation for session host provisioning.
  • Domain 2: Plan and implement identity and security — 15–20%
Tests Microsoft Entra ID hybrid and cloud-only identity configuration, hybrid identity with Active Directory Domain Services (AD DS) and Microsoft Entra Domain Services, and Azure RBAC role assignment specific to AVD (such as Desktop Virtualization Host Pool Contributor). Security topics include session host protection using Microsoft Defender for Cloud, Microsoft Defender Antivirus, and Microsoft Defender for Endpoint onboarding; conditional access policy enforcement; MFA configuration; and secure administrative access via Azure Bastion or Just-In-Time (JIT) VM access.
  • Domain 3: Plan and implement user environments and apps — 20–25%
Focuses on FSLogix configuration: profile containers, Office Display Framework Container (ODFC) settings, FSLogix Cloud Cache for cross-region resilience, and application masking rules. App delivery topics include application group creation (Desktop vs. RemoteApp), user assignment, Microsoft 365 Apps deployment, OneDrive configuration, and Microsoft Teams optimization using the Remote Desktop WebRTC Redirector Service for audio/video offloading. Dynamic application delivery using MSIX App Attach packages and image management round out this domain.
  • Domain 4: Monitor and maintain an Azure Virtual Desktop infrastructure — 10–15%
Covers diagnostic settings and log collection configuration, environment health monitoring via Azure Monitor for Azure Virtual Desktop Insights using customized Log Analytics workbooks, and Kusto Query Language (KQL) queries for session host performance analysis. Optimization and automation topics include Autoscale in host pools based on operational schedules or demand thresholds, session host capacity optimization, power state planning, and performance tuning for multi-session hosts.

What Our Customers Say 447 verified reviews

5.0 Based on 447 reviews
Good investment for the AZ-140 exam. My only regret is not buying it sooner — would have saved me a lot of study time.
— Henry C.
Just passed the AZ-140 certification. These questions were more challenging than the real exam, which is exactly how prep should be.
— Liam H.
Quick shipping? LOL jk — instant access was great. Started studying AZ-140 questions right after purchase, no delays.
— Colton W.
Good bang for your buck on the AZ-140 practice exam. Unlimited attempts means you can really drill the material.
— Zoey L.
Bought lifetime access for the AZ-140 bank and it’s been great. Still use it to brush up even after passing the cert.
— Sophie L.
Lifetime access was the selling point for me. Got sidetracked for a few months and came back — everything was still there for AZ-140.
— Layla S.

Log in to rate this exam and leave a review.

Submitted for moderation before publishing. Keep it helpful and respectful.

Frequently Asked Questions

The deepest pitfall is failing to master FSLogix profile redirection workflows at the registry level. The exam frequently challenges you on the architectural differences between standard profile containers, ODBC containers, and Cloud Cache multi-provider mirroring configurations — you must know which registry path controls each behavior. Another frequent stumbling block is Microsoft Teams optimization: you must know exactly how to deploy the WebRTC Redirector Service to offload audio/video media processing to the local client endpoint rather than overwhelming the multi-session Azure VM host. RDP Shortpath UDP connectivity troubleshooting and MSIX App Attach permission inheritance are also common failure points. Our practice questions reproduce these registry-level troubleshooting scenarios with detailed answer explanations that reference the exact FSLogix registry paths and AVD configuration documentation.

No. Microsoft Learn access is a documentation lookup tool, not a study replacement. The exam presents extensive configuration and troubleshooting scenarios where you must identify FSLogix registry path mismatches or App Attach script parameter errors. Because the exam clock continues while you browse and Ctrl+F page search is disabled, trying to look up basic answers dynamically will cause you to run out of time. You must know FSLogix registry paths, RDP Shortpath port requirements, and Autoscale scaling plan JSON schema from memory. Our practice test helps you memorize these details by presenting the same configuration scenarios you will face at the test center.

If your scaled score is under 700, a mandatory 24-hour waiting period must pass before you can book your second attempt. For a third, fourth, or fifth attempt, you must wait exactly 14 days between each consecutive registration. Microsoft caps you at five attempts within any rolling 12-month window, and each retake requires full payment of the $165 exam fee. Because AZ-140 is a specialty-level exam with a smaller candidate pool, rescheduling may take longer than for associate-level exams. Our mock exam helps you identify knowledge gaps before using an attempt by reproducing the exact question formats and difficulty level of the real exam.

Like all Microsoft role-based and specialty credentials, the certification is valid for exactly one year from your exam date. To renew it for an additional year at zero cost, you must pass an online, open-book renewal assessment on Microsoft Learn within the 180-day window preceding your credential's exact expiration date. The renewal assessment covers only the features added in the past year, such as new Autoscale capabilities or AVD Insights workbook updates. Our practice materials include a dedicated FAQ section explaining the renewal process, and the downloadable PDF includes a timeline checklist to help you track your certification expiration date.

Our mock exam reproduces the AZ-140 question formats: single-choice, multiple-response, drag-and-drop sequencing, hot area architecture templates, dropdown PowerShell/CLI script completions, and 1–2 extended case studies with enterprise remote-work constraint matrices. The practice test presents scenario questions that require you to configure FSLogix Cloud Cache multi-provider mirroring, optimize RDP Shortpath for UDP flow, deploy MSIX App Attach packages with correct permissions, and interpret Azure Monitor AVD Insights workbook metrics — the same skills measured in the real exam. Each question includes a detailed explanation that walks through the configuration logic and references the relevant AVD documentation.

Yes, the complete question bank is available as a downloadable PDF that packages all four domains in the same weighted distribution as the real exam. The PDF includes detailed answer explanations with references to official Azure and FSLogix documentation, Azure VM Image Builder template examples, and Azure Monitor AVD Insights KQL query samples. The PDF also contains step-by-step configuration guides for FSLogix Cloud Cache setup, RDP Shortpath UDP port requirements, Autoscale host pool scaling plan JSON syntax, and Azure Bastion JIT VM access configuration — all formatted for offline review during commutes or in environments without internet access.

Deploy a small AVD environment: create a pooled host pool with a custom image from Azure Compute Gallery, configure Azure Files with NTFS permissions for FSLogix profile containers, and enable Cloud Cache with two storage providers for cross-region resilience. Configure RDP Shortpath for UDP optimization and verify connectivity using the AVD Connection Quality indicator. Deploy Microsoft Teams with the WebRTC Redirector Service and verify that audio/video processing is offloaded to the local client. When you can complete a full FSLogix troubleshooting scenario — identifying why a profile container fails to mount by checking VHDLocation permissions, Cloud Cache provider order, and ODBC registry paths — without referencing documentation, the AZ-140 scenario questions become straightforward applications of your hands-on experience.