Microsoft · AZ-140
Microsoft Certified: Azure Virtual Desktop Specialty (AZ-140) Practice Tests
Validates expertise in designing, implementing, managing, and maintaining Microsoft Azure Virtual Desktop experiences and remote apps for any device.
Exam Details
Practice Questions
517
≈ 10 practice exams
Duration
100 minutes
Passing Score
700/1000
Difficulty
SpecialtyLast Updated
Jan 2025
Topics Covered
Plan and implement an Azure Virtual Desktop infrastructurePlan and implement identity and securityPlan and implement user environments and appsMonitor and maintain an Azure Virtual Desktop infrastructure
Microsoft Certified: Azure Virtual Desktop Specialty (AZ-140) Practice Exam Preparation
Use this AZ-140 practice exam to prepare for Microsoft Certified: Azure Virtual Desktop Specialty (AZ-140) with realistic questions, detailed explanations, and focused study modes. The practice bank includes 517 questions for Microsoft AZ-140, so you can review the exam steadily instead of relying on one long cram session.
As you practice, pay extra attention to recurring topics such as Plan and implement an Azure Virtual Desktop infrastructure, Plan and implement identity and security, Plan and implement user environments and apps, and Monitor and maintain an Azure Virtual Desktop infrastructure. Start with short sessions to identify weak areas, then move into timed quizzes once your accuracy is consistent.
The explanations are especially useful when you want to connect exam wording to the responsibilities and scenarios described in the official certification guidance. Use the free preview first, then unlock the full question bank when you are ready to build a complete study routine.
Exam Domain Breakdown
Plan and implement an Azure Virtual Desktop infrastructure43%
Plan and implement identity and security18%
Plan and implement user environments and apps23%
Monitor and maintain an Azure Virtual Desktop infrastructure13%
Exam Overview
The Microsoft Certified: Azure Virtual Desktop Specialty (AZ-140) validates subject matter expertise in designing, implementing, managing, and maintaining Microsoft Azure Virtual Desktop (AVD) experiences and remote apps for any device. The certification covers the full lifecycle of an AVD deployment — from planning network topology and host pool architecture, to configuring FSLogix profile containers, securing session hosts with Microsoft Defender for Endpoint, and optimizing performance through autoscaling and Azure Monitor Insights. The exam was last updated on January 14, 2026, with minor changes to the security and FSLogix domains, ensuring alignment with current Azure capabilities.
Candidates must demonstrate hands-on proficiency across Azure compute, networking, storage, identity, and resiliency as they relate to virtual desktop infrastructure. This includes working with technologies such as RDP Shortpath, Azure Private Link, Azure NetApp Files, Microsoft Entra ID (formerly Azure AD), Conditional Access, app attach for dynamic application delivery, and Azure VM Image Builder for image lifecycle management.
Who Should Take This Exam
This certification is designed for server or desktop administrators who specialize in virtual desktop infrastructure and are transitioning to or expanding within Azure-hosted environments. Ideal candidates include desktop virtualization engineers, systems administrators, and infrastructure architects who design and operate end-user computing solutions at scale for remote or hybrid workforces.
Candidates typically collaborate cross-functionally with Azure administrators, Azure architects, Azure security engineers, Microsoft 365 administrators, and Azure Local administrators. The certification is well-suited for professionals already holding the AZ-104 (Azure Administrator Associate) credential who want to deepen their specialty in virtual desktop delivery.
Prerequisites
There are no formal prerequisites required to sit the AZ-140 exam, but Microsoft recommends candidates have hands-on experience with Azure technologies spanning compute, networking, identity, storage, and resiliency before attempting it. Practical knowledge of managing end-user desktop environments — including deploying applications and configuring user settings via the Azure portal, PowerShell, Azure CLI, ARM templates, and Bicep — is strongly advised.
A working understanding of Active Directory Domain Services (AD DS), Microsoft Entra ID, and Microsoft Entra Domain Services is important given the identity-heavy content. Candidates without prior Azure administration experience are encouraged to first pass the AZ-104 (Azure Administrator Associate) exam. Familiarity with FSLogix, Windows Virtual Desktop concepts, and Microsoft 365 workloads such as Teams and OneDrive in multi-session environments will also be beneficial.
Exam Format
Exam AZ-140 is a single proctored exam that must be passed to earn the Microsoft Certified: Azure Virtual Desktop Specialty credential. Candidates are given 100 minutes to complete the assessment, which contains a variable number of questions (typically 40–60) that may include multiple-choice, scenario-based single answer, drag-and-drop, ordered-sequence, and interactive lab-style components. The exam is delivered through Pearson VUE, available both online (proctored remotely) and at in-person testing centers.
A minimum score of 700 out of 1000 is required to pass. The scoring scale is not linear — performance is evaluated against a scaled model. The exam is available in English, German, Spanish, French, Japanese, Portuguese (Brazil), and Chinese (Simplified). Non-English speakers may request an additional 30 minutes when the exam is not available in their preferred language. Candidates who fail may retake after 24 hours; subsequent retake wait times vary per Microsoft's retake policy. The certification expires annually and can be renewed at no cost via an online assessment on Microsoft Learn.
Skills Measured
- 1.Plan and implement an Azure Virtual Desktop infrastructure (40–45%): Covers network capacity planning, RDP Shortpath and QoS policy configuration, Azure Private Link for AVD, storage solutions including FSLogix on Azure Files and Azure NetApp Files, host pool and session host design, OS and licensing selection, automation with PowerShell/CLI/ARM/Bicep, and full image lifecycle management using Azure VM Image Builder and Azure Compute Gallery.
- 2.Plan and implement identity and security (15–20%): Covers identity scenario selection across AD DS, Microsoft Entra ID, and Microsoft Entra Domain Services; RBAC and role assignments; Conditional Access policies; passwordless, smart card, and MFA authentication options; single sign-on (SSO) configuration; Microsoft Defender for Cloud and Defender for Endpoint onboarding; NSGs, Azure Firewall, UDRs; JIT VM access and Azure Bastion; and Trusted Launch/Confidential VM security features.
- 3.Plan and implement user environments and apps (20–25%): Covers FSLogix Profile Containers, Office Profile Containers (ODFC), Cloud Cache, and application masking; AVD client deployment and device redirection; multimedia redirection, Universal Print, and RDP property configuration; Microsoft 365 Apps, OneDrive multisession, Microsoft Teams with WebRTC Redirector Service; app attach for dynamic application delivery; RemoteApp publishing; and application group management.
- 4.Monitor and maintain an Azure Virtual Desktop infrastructure (10–15%): Covers log collection and analysis, Azure Monitor and Azure Virtual Desktop Insights workbook customization, session host performance optimization, autoscaling in host pools, active session management, OS update strategies for session hosts, multi-region disaster recovery planning, and backup/restore for FSLogix profiles, personal VDIs, and images.
Study Tips
- Start with the official AZ-140 study guide on Microsoft Learn (https://learn.microsoft.com/en-us/credentials/certifications/resources/study-guides/az-140), which lists every measured skill with sub-objectives and links to relevant documentation. Use it as your primary study roadmap.
- Take the free official Practice Assessment for AZ-140 on Microsoft Learn (assessmentId=69) before and after studying each domain to identify knowledge gaps and track progress. It mirrors the real exam's question style and difficulty.
- Prioritize hands-on lab work on the highest-weighted domain (Plan and implement AVD infrastructure, 40–45%). Deploy host pools, configure FSLogix profile containers on Azure Files, and practice automating deployments using both PowerShell and Bicep templates in a real Azure subscription.
- Complete the instructor-led or self-paced Microsoft course AZ-140T00-A: Configure and Operate Microsoft Azure Virtual Desktop, available on Microsoft Learn. This course aligns directly with exam objectives and includes guided labs covering networking, image management, and security configuration.
- Pay close attention to the identity and security domain — specifically how Conditional Access, single sign-on, Microsoft Entra ID versus AD DS versus Entra Domain Services scenarios differ, and how Microsoft Defender for Endpoint integrates with session hosts. These topics are frequently tested with scenario-based questions.
- Watch the AZ-140 preparation videos in Microsoft Learn's Exam Readiness Zone, which feature Microsoft experts walking through each exam domain with tips and common exam traps.
- Study the app attach feature in depth (including creating and managing MSIX app attach packages) and contrast it with traditional application installation — this is a specialty topic unique to AVD that appears consistently in the user environments and apps domain.
Career Benefits
Professionals holding the Azure Virtual Desktop Specialty certification are positioned for roles such as Desktop Virtualization Engineer, End-User Computing (EUC) Architect, Azure Infrastructure Administrator, and Cloud Workspace Specialist. As organizations continue to expand hybrid and remote work infrastructure, demand for AVD expertise remains strong — particularly for enterprises migrating from on-premises Remote Desktop Services (RDS) or Citrix/VMware Horizon environments to Azure-native VDI. Average salaries for virtual desktop engineers in the United States exceed $120,000 per year, with certified professionals typically earning 10–11% more than non-certified peers according to industry salary surveys.
The AZ-140 differentiates candidates from general Azure administrators (AZ-104) by demonstrating deep, scenario-specific expertise in desktop virtualization — a niche that commands a premium in the job market. Compared to vendor-neutral VDI certifications, the Microsoft Specialty badge carries particular weight with Microsoft partner organizations and enterprise customers on Microsoft's ecosystem. The certification renews annually at no cost via a free online assessment on Microsoft Learn, keeping holders current as the AVD platform evolves.
Sample Questions
5 sample questions with answers and explanations. The full bank has 517 questions, enough for 10 full-length practice exams.
Preview — answers shown1. ResourceOptimization Corp uses Azure Virtual Desktop with a pooled host pool where session hosts currently run on Standard_B2s virtual machine size with Standard HDD disks. Due to increased user demands and performance requirements, they need to upgrade their session hosts to use Standard_D8s_v5 virtual machine size with Premium SSD disks for the operating system. What action should they take to implement these configuration changes?
AUse the Update-AzWvdSessionHostConfiguration cmdlet for configuration changes
BConfigure autoscale settings to adjust VM specifications automatically
CManually resize each virtual machine through the Azure portal
DCreate a new virtual machine scale set with updated specifications
Explanation
The Update-AzWvdSessionHostConfiguration PowerShell cmdlet is specifically designed to update session host configurations in Azure Virtual Desktop environments, including changes to VM size and disk type. This cmdlet provides an efficient method to apply configuration changes across session hosts while leveraging Azure Virtual Desktop management capabilities. Creating a new virtual machine scale set would involve significant additional effort, downtime, and complexity compared to using the dedicated session host configuration cmdlet. Autoscale settings control the number of VMs based on demand but do not change the size or disk type of existing VMs. Manually resizing each VM through the portal is inefficient and does not utilize the specialized Azure Virtual Desktop management tools available.
2. GlobalWork Inc. is implementing App Attach and wants to understand the difference between registration types. What is the difference between 'On-demand' and 'Register at logon' registration types?
AOn-demand requires manual administrator action, while Register at logon is fully automatic
BOn-demand is for RemoteApp applications only, while Register at logon is for desktop applications
COn-demand registers applications when users click on them, while Register at logon makes applications available immediately at user login
DThere is no functional difference between the two registration types
Explanation
The registration type determines when App Attach applications become available to users. 'On-demand' registration means applications are registered and made available only when users actually click on them or attempt to use them, providing just-in-time access. 'Register at logon' means applications are registered and made available immediately when the user logs into their session, ensuring applications are ready to use without delay. The choice depends on whether you want to minimize logon time (use on-demand) or ensure immediate application availability (use register at logon).
3. ThreatProtection Corp needs to implement Windows threat protection features on their Azure Virtual Desktop session hosts to prevent unauthorized applications from running and protect sensitive folders from ransomware attacks. Which Windows security features should they enable?
AWindows Defender Application Control and Controlled Folder Access
BWindows Defender SmartScreen for browsers only
CBitLocker encryption for all drives
DWindows Defender Firewall with custom rules only
Explanation
Windows Defender Application Control (WDAC) prevents unauthorized applications from executing by allowing only trusted applications to run, while Controlled Folder Access protects important folders from unauthorized changes by ransomware and other malicious software. These features provide comprehensive threat protection for Azure Virtual Desktop session hosts. Windows Defender Firewall alone doesn't prevent unauthorized application execution or protect against ransomware folder access. BitLocker provides data encryption but doesn't prevent malicious application execution. Windows Defender SmartScreen for browsers provides web protection but doesn't address the broader threat protection requirements.
4. A remote-first startup, InnovateNow, is deploying Azure Virtual Desktop for all its employees, who will be connecting from their home networks. The IT team needs to provide simple instructions to employees on how to configure their personal firewalls if they run into connection issues. What is the primary outbound connection that clients must allow to connect to the AVD service?
AUDP port 53
BTCP port 1433
CUDP port 3389
DTCP port 443
Explanation
Azure Virtual Desktop clients do not require any open inbound ports, which makes them very secure. They establish a connection by reaching out to the AVD service. This outbound connection is a reverse connection that securely uses TCP port 443. This is the same port used for standard encrypted web traffic (HTTPS), so it is almost always allowed through firewalls, making connectivity very reliable. The client connects to the nearest AVD gateway, and the session is established over this secure channel.
5. An IT administrator at QuantumLeap Analytics is configuring Azure NetApp Files to store FSLogix profile containers for their data scientists' AVD environment. Following the documentation, they have successfully created an Azure NetApp Files account and provisioned a capacity pool with the Premium service tier. What is the immediate next logical step they must take to make the storage usable?
ACreate an Azure NetApp Files volume
BConfigure the Azure Virtual Desktop host pool
CConfigure the FSLogix profile containers on the session hosts
DCreate a new virtual machine to manage the storage
Explanation
The setup process for Azure NetApp Files follows a clear hierarchy. First, you create the account. Second, you create a capacity pool, which is like reserving a block of storage performance and capacity. The third and necessary next step is to create a volume within that pool. This volume is the actual endpoint that you can mount using protocols like SMB and where you will store the FSLogix profile containers. You cannot configure FSLogix or the host pool to use the storage until the volume has been created.
AZ-140 Dumps Risk Every Other Microsoft Cert You Have Earned
AZ-140 sits under the same Candidate Agreement as every Microsoft exam: unauthorized exam content is treated as misconduct, and Microsoft's standard response is to revoke your full certification history and ban you from future exams, not just invalidate the one result.
If you already hold other Microsoft certifications, or are stacking AZ-140 toward a specialty path, that math gets worse the more you have earned. CertCompanion's AZ-140 bank has 517 practice questions, 30 free, built around real Azure Virtual Desktop deployment and management scenarios.
More Microsoft Practice Exams
Microsoft Certified: Machine Learning Operations (MLOps) Engineer Associate (AI-300)
AI-300 · 583 questions
Microsoft Certified: SQL AI Developer Associate (DP-800)
DP-800 · 600 questions
Microsoft 365 Certified: Collaboration Communications Systems Engineer Associate (MS-721)
MS-721 · 306 questions
Microsoft Certified: Windows Server Hybrid Administrator Associate (AZ-801)
AZ-801 · 1376 questions
Microsoft Certified: Cybersecurity Architect Expert (SC-100)
SC-100 · 880 questions
Microsoft Certified: Cybersecurity Business Professional (SC-730)
SC-730 · 575 questions
$17.99
One-time access to this exam
517 questions (10 practice exams' worth)
Unlimited timed exam simulations
Yours forever — no subscription
Detailed explanations
Free preview stays available