[Microsoft] AZ-140 - Azure Virtual Desktop Specialty Exam Dumps & Study Guide
The Configuring and Operating Microsoft Azure Virtual Desktop (AZ-140) is the premier certification for IT professionals who want to demonstrate their expertise in designing and managing virtual desktop infrastructures using Azure Virtual Desktop (AVD). As organizations increasingly adopt remote and hybrid work models, the ability to build and manage robust, scalable, and secure virtual desktop solutions has become a highly sought-after skill. The AZ-140 validates your core knowledge of Azure Virtual Desktop, including its various features and advanced capabilities. It is an essential milestone for any professional looking to lead in the age of modern desktop virtualization.
Overview of the Exam
The AZ-140 exam is a rigorous assessment that covers the implementation and management of Azure Virtual Desktop solutions. It is a 120-minute exam consisting of approximately 40-60 questions. The exam is designed to test your knowledge of AVD technologies and your ability to apply them to real-world administration scenarios. From planning and implementing AVD infrastructure to managing user identities, profiles, and applications, the AZ-140 ensures that you have the skills necessary to build and maintain modern cloud-managed virtual desktop environments. Achieving the AZ-140 certification proves that you are a highly skilled professional who can handle the technical demands of Azure Virtual Desktop administration.
Target Audience
The AZ-140 is intended for IT professionals who have a solid understanding of Azure Virtual Desktop and Microsoft 365 services. It is ideal for individuals in roles such as:
1. Azure Virtual Desktop Administrators
2. Systems Administrators
3. Virtualization Engineers
4. IT Managers and Directors
To qualify for the Microsoft Certified: Azure Virtual Desktop Specialty certification, candidates must pass the AZ-140 exam.
Key Topics Covered
The AZ-140 exam is organized into several main domains:
1. Plan and Implement an Azure Virtual Desktop Infrastructure (40-45%): Designing and implementing AVD host pools, session hosts, and storage.
2. Manage Access and Security (10-15%): Implementing secure authentication and authorization solutions using Entra ID and managing user access.
3. Manage User Environments and Apps (20-25%): Configuring and managing user profiles using FSLogix and deploying applications to AVD.
4. Monitor and Maintain an Azure Virtual Desktop Infrastructure (20-25%): Monitoring performance and health of AVD environments and performing maintenance tasks.
Benefits of Getting Certified
Earning the AZ-140 certification provides several significant benefits. First, it offers industry recognition of your specialized expertise in Microsoft's virtual desktop technologies. As a leader in the cloud industry, Microsoft skills are in high demand across the globe. Second, it can lead to increased career opportunities and higher salary potential in a variety of roles. Third, it demonstrates your commitment to professional excellence and your dedication to staying current with the latest virtual desktop administration practices. By holding this certification, you join a global community of Microsoft professionals and gain access to exclusive resources and continuing education opportunities.
Why Choose NotJustExam.com for Your AZ-140 Prep?
The AZ-140 exam is challenging and requires a deep understanding of Azure Virtual Desktop's complex features. NotJustExam.com is the best resource to help you master this material. Our platform offers an extensive bank of practice questions that are designed to mirror the actual exam’s format and difficulty.
What makes NotJustExam.com stand out is our focus on interactive logic and the accuracy of our explanations. We don’t just provide a list of questions; we provide a high-quality learning experience. Every question in our bank includes an in-depth, accurate explanation that helps you understand the technical reasoning behind the correct administration solutions. This ensures that you are truly learning the material and building the confidence needed to succeed on the exam. Our content is regularly updated to reflect the latest Microsoft features and exam updates. With NotJustExam.com, you can approach your AZ-140 exam with the assurance that comes from thorough, high-quality preparation. Start your journey toward becoming a Certified Azure Virtual Desktop Specialist today with us!
Free [Microsoft] AZ-140 - Azure Virtual Desktop Specialty Practice Questions Preview
-
Question 1
HOTSPOT -
You have an Azure Virtual Desktop deployment.
Many users have iOS devices that have the Remote Desktop Mobile app installed.
You need to ensure that the users can connect to the feed URL by using email discovery instead of entering the feed URL manually.
How should you configure the _msradc DNS record? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Correct Answer:
See interactive view.
Explanation:
The AI recommends agreeing with the suggested answer.
The reasoning is that the correct configuration for email discovery in Azure Virtual Desktop (AVD) involves creating a TXT record with the specified value.
This configuration allows users to connect to the feed URL using their email addresses instead of manually entering the URL in the Remote Desktop Mobile app on their iOS devices. The TXT record should be named "_msradc" and placed in the DNS zone corresponding to the user's email domain.
The provided URL is the correct URL for Azure Virtual Desktop (AVD), specifically for the ARM-based feed discovery.
Incorrect answers would likely include:
- Using an incorrect record type (e.g., A record, CNAME record).
- Using an incorrect or outdated URL for the TXT record value.
- Omitting the "/arm/" part of the URL.
Citations:
- Configure email discovery to subscribe to your Windows Virtual Desktop feed, https://jenzushsu.medium.com/configure-email-discovery-to-subscribe-to-your-windows-virtual-desktop-feed-49dbb8db553c
- Connect with the iOS client, https://docs.microsoft.com/en-us/azure/virtual-desktop/connect-ios
-
Question 2
You have an Azure Active Directory (Azure AD) tenant named contoso.com and an Azure virtual network named VNET1.
To VNET1, you deploy an Azure Active Directory Domain Services (Azure AD DS) managed domain named litwareinc.com.
To VNET1, you plan to deploy a Azure Virtual Desktop host pool named Pool1.
You need to ensure that you can deploy Windows 10 Enterprise session hosts to Pool1.
What should you do first?
- A. Modify the settings of the litwareinc.com DNS zone.
- B. Modify the DNS settings of VNET1.
- C. Add a custom domain name to contoso.com.
- D. Implement Azure AD Connect cloud sync.
Correct Answer:
B
Explanation:
The AI agrees with the suggested answer, which is B. Modify the DNS settings of VNET1.
The primary reason for this choice is that the Azure Virtual Desktop session hosts need to be able to resolve the domain name of the Azure AD Domain Services (Azure AD DS) managed domain (litwareinc.com) to the correct IP addresses. This resolution is achieved by configuring the virtual network's DNS settings to point to the Azure AD DS domain controllers. Without proper DNS configuration, the session hosts won't be able to join the domain, which is a prerequisite for deploying and managing them within the domain environment.
Here's a breakdown of why the other options are not the best choice:
- A. Modify the settings of the litwareinc.com DNS zone: While managing the DNS zone is important for overall domain management, it's not the immediate first step. The virtual network needs to be configured to *use* that DNS zone first.
- C. Add a custom domain name to contoso.com: This is not necessary for deploying session hosts to Pool1 within the litwareinc.com domain. contoso.com is the Azure AD tenant, and adding a custom domain there doesn't directly facilitate the domain join process for the AVD session hosts in VNET1 using litwareinc.com.
- D. Implement Azure AD Connect cloud sync: Azure AD Connect cloud sync is used to synchronize identities from on-premises Active Directory to Azure AD. Since the scenario involves Azure AD DS, which is already integrated with Azure AD, this step is not relevant for enabling domain join for the session hosts.
Therefore, configuring the virtual network's DNS settings is the crucial first step to ensure that the session hosts can discover and join the Azure AD DS managed domain.
Citations:
- Azure AD Domain Services Networking Considerations, https://learn.microsoft.com/en-us/azure/active-directory-domain-services/network-considerations
- Azure Virtual Desktop Domain Join, https://learn.microsoft.com/en-us/azure/virtual-desktop/domain-join
-
Question 3
You have the devices shown in the following table.

You plan to deploy Azure Virtual Desktop for client access to remove virtualized apps.
Which devices support the Remote Desktop client?
- A. Device1 and Device2 only
- B. Device1 and Device3 only
- C. Device1, Device2, and Device3
- D. Device1 only
Correct Answer:
B
Explanation:
The AI agrees with the suggested answer.
The suggested answer is B. Device1 and Device3 only.
The reason for this answer is that the Azure Virtual Desktop (AVD) Remote Desktop client requires a supported operating system. Device1 runs Windows 10, and Device3 runs Windows Server 2016, both of which are supported.
Device2 runs Windows 8.1, which is not supported by the modern Remote Desktop client, as it reached its end of life on January 10, 2023. Therefore, Device2 is not a viable option, and options A and C are incorrect since they include Device2. Option D is also incorrect because it only includes Device1, excluding the valid Device3.
The key factor is that the Remote Desktop client used for AVD has specific OS requirements that must be met for the devices to be compatible.
- Citations:
- Remote Desktop clients: https://learn.microsoft.com/en-us/azure/virtual-desktop/users/connect-windows
- Windows 8.1 end of support: https://support.microsoft.com/en-us/windows/windows-8-1-end-of-support-update-3cfd4cae-b719-4768-80cc-3c53e16c9e43
-
Question 4
HOTSPOT -
You plan to deploy Azure Virtual Desktop.
Users have the devices shown in the following table.

From which device types can the users connect to Azure Virtual Desktop resources by using the Remote Desktop client app and the Remote Desktop web client?
To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Correct Answer:
See interactive view.
Explanation:
The AI agrees with the suggested answer.
Reasoning:
The question asks about devices that can connect to Azure Virtual Desktop (AVD) using the Remote Desktop client app and the Remote Desktop web client. The suggested answer correctly identifies which device types are compatible with each client.
Remote Desktop Client App:
The Remote Desktop client application is available on a variety of platforms, including Windows, macOS, and Android. Therefore, laptops, macOS devices (i.e., MacBooks), Android tablets, and Android phones can use the Remote Desktop client app to connect to AVD resources.
Remote Desktop Web Client:
The Remote Desktop web client enables users to connect to AVD resources through a web browser. It supports Windows, macOS, ChromeOS, and Linux. It effectively supports laptops and tablets, but not Android or iOS phones due to their lack of support for all web features.
Why the other options are incorrect:
The other options are incorrect because they either omit a supported device or include an unsupported device for either the Remote Desktop client app or the Remote Desktop web client.
For example, not selecting Android phone under "Remote Desktop client app" will be incorrect, since there is Remote Desktop client app for Android.
Also, selecting Android phone under "Remote Desktop web client" will be incorrect, since web client is not designed for phones.
- Suggested Answer Summary:
- Laptop: Supports both Remote Desktop Client App and Remote Desktop Web Client.
- MacBook: Supports both Remote Desktop Client App and Remote Desktop Web Client.
- Android Tablet: Supports Remote Desktop Client App, but supports Remote Desktop Web Client.
- Android Phone: Supports Remote Desktop Client App, but does not support Remote Desktop Web Client.
Citations:
- Connect to Azure Virtual Desktop with the web client, https://docs.microsoft.com/en-us/azure/virtual-desktop/connect-web
- Connect to Azure Virtual Desktop with Android, https://docs.microsoft.com/en-us/azure/virtual-desktop/connect-android
- Connect to Azure Virtual Desktop with macOS, https://docs.microsoft.com/en-us/azure/virtual-desktop/connect-macos
-
Question 5
HOTSPOT -
You have an Azure Virtual Desktop deployment.
You plan to create the host pools shown in the following table.

You need to recommend the virtual machine size for each host pool. The solution must minimize costs.
Which size should you recommend for each pool? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Correct Answer:
See interactive view.
Explanation:
The AI agrees with the suggested answer.
Reasoning: The question asks for the most cost-effective VM size for each host pool in an Azure Virtual Desktop deployment. The key considerations are the workload type (knowledge workers vs. graphics-intensive applications) and the need to minimize costs.
-
Host Pool 1 (Knowledge Workers): The Dv4-series VMs are a good choice for general-purpose workloads like knowledge workers. They offer a balance of CPU, memory, and disk performance at a reasonable cost. The `Standard_D2v4` is selected to match requirements with low cost.
-
Host Pool 2 (Graphics-Intensive Applications): For graphics-intensive applications, the NVv3-series VMs, specifically the `Standard_NV6`, are designed for virtual workstations requiring GPUs. They are optimized for visualization and remote desktop scenarios. They are more expensive than the Dv4 series but are necessary for the required workload.
-
Premium Storage Support: Both the Dv4 and NVv3 series support Premium Storage, which is essential for good performance in most AVD scenarios.
Why other options are less suitable:
-
The Av2 series is generally for dev/test and not recommended for production AVD workloads, especially not for knowledge workers who need a responsive experience. Furthermore, the discussion pointed out that it is not supported by premium storage, which impacts performance.
-
Other VM sizes within the Dv4 or NVv3 series might be oversized (and thus more expensive) or undersized (and thus not provide sufficient performance) for the specified workloads. The chosen sizes, `Standard_D2v4` and `Standard_NV6`, represent a reasonable balance between cost and performance.
Suggested Answer Breakdown:
In summary, the suggested answer correctly identifies the most cost-effective VM sizes for each host pool based on the described workloads and the need to minimize costs, leveraging Dv4-series for knowledge workers and NVv3-series for graphics-intensive applications.
Citations:
- Azure Virtual Machines sizes, https://docs.microsoft.com/en-us/azure/virtual-machines/sizes
- NVv3-series, https://docs.microsoft.com/en-us/azure/virtual-machines/nvv3-series
- Dv4 and Dsv4-series, https://docs.microsoft.com/en-us/azure/virtual-machines/dv4-dsv4-series
-
Question 6
You plan to deploy Azure Virtual Desktop to meet the department requirements shown in the following table.

You plan to use Azure Virtual Desktop host pools with load balancing and autoscaling.
You need to recommend a host pool design that meets the requirements. The solution must minimize costs.
What is the minimum number of host pools you should recommend?
Correct Answer:
C
Explanation:
The AI suggests that the answer is C. 3.
Reasoning:
The question asks for the *minimum* number of host pools to meet the requirements while minimizing costs. The requirements include:
- A single-session persistent desktop for the Engineering department.
- A multi-session desktop with GPU support for the Design department.
- A multi-session desktop without GPU support for the other departments.
Therefore,
the minimum number of host pools is three, each designed for each specific use case.
Why other options are not optimal:
- A. 1: One host pool cannot satisfy all requirements because different departments need single-session and multi-session desktops and different GPU requirements.
- B. 2: Two host pools cannot fully separate the single-session needs of the Engineering department and the GPU and non-GPU needs of the other two departments.
- D. 4: While four host pools *could* work (e.g., one for Engineering, one for Design with GPU, one for the rest without GPU and a final one to separate application groups), the question asks for the *minimum* number of host pools. A design with three host pools is simpler and therefore more cost-effective.
Citations:
- Azure Virtual Desktop Host Pools, https://learn.microsoft.com/en-us/azure/virtual-desktop/concepts/host-pool-concepts
-
Question 7
Your company has a main office and two branch offices. Each office connects directly to the internet. The router in each branch office is configured as an endpoint for the following VPNs:
✑ A VPN connection to the main office
✑ A site-to-site VPN to Azure
The routers in each branch office have the Quality of Service (QoS) rules shown in the following table.

Users in the branch office report slow responses and connection errors when they attempt to connect to Azure Virtual Desktop resources.
You need to modify the QoS rules on the branch office routers to improve Azure Virtual Desktop performance.
For which rule should you increase the bandwidth allocation?
- A. Rule2
- B. Rule3
- C. Rule4
- D. Rule1
Correct Answer:
B
Explanation:
The AI agrees with the suggested answer, which is B (Rule3).
The primary reason for this recommendation is that the scenario describes branch offices connecting directly to the internet. Azure Virtual Desktop performance issues are reported, and since RDP Shortpath over public networks is enabled by default and commonly used in such configurations, increasing the bandwidth allocation for Rule3, which handles UDP traffic, is the most appropriate action.
The other options are not the best choice because:
- Rule1: This rule prioritizes TCP traffic, but Azure Virtual Desktop, especially with RDP Shortpath, relies on UDP for a more responsive experience.
- Rule2: This rule applies to a specific UDP port range (50000-50059) and may not cover the entire range used by Azure Virtual Desktop or other latency-sensitive applications. It is less comprehensive than adjusting Rule3, which covers all UDP.
- Rule4: This rule targets ESP (Encapsulating Security Payload), which is typically associated with VPN traffic. The problem description indicates that the connection issues occur when connecting *to* Azure Virtual Desktop resources, implying the traffic in question is *from* the branch offices *to* Azure. ESP would be more relevant to the VPN tunnel itself, not the AVD session.
Citations:
- Understanding RDP Shortpath for Azure Virtual Desktop, https://learn.microsoft.com/en-us/azure/virtual-desktop/rdp-shortpath
-
Question 8
You plan to deploy Azure Virtual Desktop. The deployment will use existing virtual machines.
You create a Azure Virtual Desktop host pool.
You need to ensure that you can add the virtual machines to the host pool.
What should you do first?
- A. Register the Microsoft.DesktopVirtualization provider.
- B. Generate a registration key.
- C. Run the Invoke-AzVMRunCommand cmdlet.
- D. Create a role assignment.
Correct Answer:
B
Explanation:
The AI suggests to agree with the suggested answer, which is B. Generate a registration key.
The primary reason for choosing this answer is that a registration key is essential for joining existing virtual machines to an Azure Virtual Desktop host pool. This key authorizes the VMs to register with the AVD service and become available to users.
Here's a breakdown of why the other options are less suitable:
-
A. Registering the Microsoft.DesktopVirtualization provider is a prerequisite for using AVD, but it's typically done at the subscription level and not specific to adding VMs to a host pool. It is more of a one-time setup step.
-
C. The Invoke-AzVMRunCommand cmdlet is used to run commands on Azure VMs, but it is not directly related to registering VMs with an AVD host pool.
-
D. Creating a role assignment is related to granting permissions, but it is not the specific action needed to register VMs with an AVD host pool. While role assignments are important for overall AVD security, they don't directly address the task of joining VMs to a host pool.
To summarize, while other configurations are needed for Azure Virtual Desktop, the most immediate step to add existing VMs to a host pool is to generate a registration key.
Citations:
- Azure Virtual Desktop documentation, https://learn.microsoft.com/en-us/azure/virtual-desktop/add-vm-to-host-pool
-
Question 9
You are designing an Azure Virtual Desktop deployment.
You identify the network latency between the locations where users reside and the planned deployment.
What should you use to identify the best Azure region to deploy the host pool?
- A. Azure Traffic Manager
- B. Azure Virtual Desktop Experience Estimator
- C. Azure Monitor for Azure Virtual Desktop
- D. Azure Advisor
Correct Answer:
B
Explanation:
Based on professional knowledge and the provided discussion, the AI agrees with the suggested answer of B. Azure Virtual Desktop Experience Estimator.
Reasoning:
The primary goal is to identify the best Azure region for the host pool, considering network latency between user locations and the planned deployment. The Azure Virtual Desktop Experience Estimator is specifically designed to measure and estimate the connection round trip time (RTT) from the user's location to various Azure regions. This RTT is a direct indicator of network latency and is crucial for determining the user experience. A lower RTT generally translates to a better user experience.
The tool helps administrators make informed decisions about region selection by providing empirical data on network latency. This ensures that the Azure Virtual Desktop deployment is placed in a region that minimizes latency for the majority of users.
Why other options are not suitable:
- A. Azure Traffic Manager: Azure Traffic Manager is a DNS-based traffic load balancer. It distributes traffic to different endpoints based on policies. While it can factor in latency, it does not provide the granular, upfront estimation of network latency between user locations and Azure regions that the Azure Virtual Desktop Experience Estimator provides. It's more suited for directing traffic after the deployment is already in place.
- C. Azure Monitor for Azure Virtual Desktop: Azure Monitor is used for monitoring the performance and health of Azure Virtual Desktop environments after they have been deployed. It does not provide any assistance in determining the optimal Azure region during the planning phase.
- D. Azure Advisor: Azure Advisor provides recommendations for optimizing Azure deployments based on best practices. While it might provide general recommendations, it does not offer a specific tool or feature to measure network latency between user locations and Azure regions for the purpose of Azure Virtual Desktop deployment planning.
Therefore, Azure Virtual Desktop Experience Estimator is the most suitable tool for identifying the best Azure region based on network latency.
- Azure Virtual Desktop Experience Estimator, https://learn.microsoft.com/en-us/azure/virtual-desktop/experience-estimator
-
Question 10
You have an Azure Virtual Desktop host pool named Pool1 in the East US region.
You have a storage account named storage1 that contains FSLogix profile containers. In the East US region, you have a shared image gallery named SIG1 that contains a virtual machine image named Image1. Image1 is used to create new session hosts in Pool1.
You plan to deploy a new Azure Virtual Desktop host pool named Pool2 to the South India region.
You need to implement a session host deployment solution for Pool2 that meets the following requirements:
✑ Image1 must replicate in the South India region.
✑ The session hosts in Pool2 must be based on Image1.
✑ Changes to Image1 must be available in the South India and East US regions.
What should you include in the solution?
- A. Create a new shared image gallery named SIG2 in the South India region. Upload a copy of Image1 to SIG2.
- B. Create a new Azure Storage account named storage2 in the South India region. Copy Image1 to a shared folder in storage2.
- C. From SIG1, update the replication for the latest image version of Image1.
- D. Configure geo-redundant storage (GRS) replication for storage1. Copy the VHD file of Image1 to the FSLogix profile container.
Correct Answer:
C
Explanation:
The AI agrees with the suggested answer of C.
The primary reason for selecting option C is that it leverages the built-in replication capabilities of Shared Image Galleries to distribute image updates across regions automatically.
This ensures that any changes made to Image1 in the East US region are replicated to the South India region, meeting the requirement that changes to Image1 must be available in both regions. By updating the replication settings for the latest image version within SIG1, Azure handles the replication process, ensuring consistency and minimizing manual intervention.
The other options are incorrect for the following reasons:
- Option A is incorrect because creating a new shared image gallery (SIG2) and uploading a copy of Image1 to it will not automatically synchronize changes between the two galleries. This would require manual updates to both galleries whenever Image1 is modified, which does not meet the stated requirements of automatic replication.
- Option B is incorrect because copying Image1 to a new Azure Storage account (storage2) in South India does not provide any mechanism for automatically propagating updates from the East US region. This approach would also necessitate manual copying of the image whenever updates are made, failing to meet the requirement of automatic replication.
- Option D is incorrect because configuring geo-redundant storage (GRS) for storage1 replicates the entire storage account, which is unnecessary and inefficient for replicating a single image. Additionally, copying the VHD file of Image1 to the FSLogix profile container is not relevant to the task of replicating the base image for session hosts. GRS is also meant for disaster recovery, not for managing image replication across regions for Azure Virtual Desktop deployments.
Citations:
- Shared Image Gallery Overview, https://learn.microsoft.com/en-us/azure/virtual-machines/shared-image-galleries