Pass Microsoft Azure AZ-140 Exam in First Attempt Easily
Real Microsoft Azure AZ-140 Exam Questions, Accurate & Verified Answers As Experienced in the Actual Test!

Verified by experts
3 products

You save $69.98

AZ-140 Premium Bundle

  • Premium File 372 Questions & Answers
  • Last Update: Oct 25, 2026
  • Training Course 79 Lectures
  • Study Guide 430 Pages
$79.99 $149.97

Purchase Individually

  • Premium File

    372 Questions & Answers
    Last Update: Oct 25, 2026

    $76.99
    $69.99
  • Training Course

    79 Lectures

    $43.99
    $39.99
  • Study Guide

    430 Pages

    $43.99
    $39.99

Configuring and Operating Microsoft Azure Virtual Desktop AZ-140 Practice Test 17

Question 160

An administrator needs to correct the following: A call center wants a desktop resource visible only to an authorized employee group. Which action is most relevant?

  1. Disable drain mode after verifying the host is healthy and ready for user traffic
  2. Include the supported agent and registration process after VM provisioning
  3. Expand or select suitable subnets with free addresses and rerun deployment
  4. Create the appropriate application group and assign the relevant Microsoft Entra security group

Explanation

Correct Answer

D:

Create the appropriate application group and assign the relevant Microsoft Entra security group. AVD application group assignments control which users are entitled to publishable desktop resources. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Disable drain mode after verifying the host is healthy and ready for user traffic. This would be appropriate for the different task-specific situation "A host in drain mode remains excluded from fresh connections after patch maintenance finishes", because A session host stays unavailable for new placements until its drain state is removed. It does not directly resolve the stated condition, which calls for Create the appropriate application group and assign the relevant Microsoft Entra security group.

B:

Include the supported agent and registration process after VM provisioning. This would be appropriate for the different task-specific situation "A PowerShell automation creates only session-host Azure VMs but never registers their AVD agent", because AVD service placement depends on completed host-pool registration, not simply Azure VM creation. It does not directly resolve the stated condition, which calls for Create the appropriate application group and assign the relevant Microsoft Entra security group.

C:

Expand or select suitable subnets with free addresses and rerun deployment. This would be appropriate for the different task-specific situation "A deployment chooses a subnet with no remaining IP addresses and newly provisioned session hosts fail to start", because Every session host NIC requires an address from its assigned Azure virtual network subnet. It does not directly resolve the stated condition, which calls for Create the appropriate application group and assign the relevant Microsoft Entra security group.

Question 161

For the scenario "A cloud-only Entra user needs to reach a domain-dependent SMB profile share with unsupported identity configuration", a team selects "Select a supported Azure Files identity approach such as Microsoft Entra Kerberos and validate all prerequisites". Which technical principle best explains why it works?

  1. FSLogix profile storage authentication must be compatible with the host's chosen join and user identity model.
  2. Application group entitlement cannot override a host policy that explicitly denies the requested logon type.
  3. Azure RBAC rights do not automatically extend to unrelated subscriptions outside the assignment scope.
  4. Conditional Access evaluation requires the targeted service sign-in to match the policy's cloud app scope.

Explanation

Correct Answer

A:

FSLogix profile storage authentication must be compatible with the host's chosen join and user identity model. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

B:

Application group entitlement cannot override a host policy that explicitly denies the requested logon type. This describes the separate situation "A workstation group applies a GPO that denies remote interactive logon to the very users assigned to AVD" but does not justify the selected fix for the current issue. The decisive behavior is: FSLogix profile storage authentication must be compatible with the host's chosen join and user identity model.

C:

Azure RBAC rights do not automatically extend to unrelated subscriptions outside the assignment scope. This describes the separate situation "A host pool administrator attempts to manage AVD resources across subscriptions using a role assigned in only one subscription" but does not justify the selected fix for the current issue. The decisive behavior is: FSLogix profile storage authentication must be compatible with the host's chosen join and user identity model.

D:

Conditional Access evaluation requires the targeted service sign-in to match the policy's cloud app scope. This describes the separate situation "A Conditional Access policy is configured for the wrong enterprise cloud app and never challenges AVD clients" but does not justify the selected fix for the current issue. The decisive behavior is: FSLogix profile storage authentication must be compatible with the host's chosen join and user identity model.

Question 162

The Azure Virtual Desktop team plans to "Check Windows App client support, Teams versions and installed redirection components" because: A help desk reports that the Teams optimization status shows not optimized for a portion of users. Which explanation supports the plan?

  1. Application lifecycle controls determine availability, whereas user profile preservation is a separate concern.
  2. Media optimization depends on compatibility across the endpoint client and session-host software.
  3. Packaging must preserve the executable's required runtime dependencies for successful remote launch.
  4. Not every Windows application can be delivered as a suitable App attach package without modification.

Explanation

Correct Answer

B:

Media optimization depends on compatibility across the endpoint client and session-host software. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Application lifecycle controls determine availability, whereas user profile preservation is a separate concern. This describes the separate situation "An organization must remove an unapproved application from all new AVD sessions while preserving existing profiles" but does not justify the selected fix for the current issue. The decisive behavior is: Media optimization depends on compatibility across the endpoint client and session-host software.

C:

Packaging must preserve the executable's required runtime dependencies for successful remote launch. This describes the separate situation "A packaged application depends on a DLL that was omitted during MSIX preparation and fails to launch" but does not justify the selected fix for the current issue. The decisive behavior is: Media optimization depends on compatibility across the endpoint client and session-host software.

D:

Not every Windows application can be delivered as a suitable App attach package without modification. This describes the separate situation "An MSI installer modifies Windows services and is incompatible with dynamic App attach packaging" but does not justify the selected fix for the current issue. The decisive behavior is: Media optimization depends on compatibility across the endpoint client and session-host software.

Question 163

An enterprise AVD deployment has this requirement: The team wants to identify whether AVD sessions used UDP Shortpath or TCP fallback during a fault. Choose the most appropriate implementation.

  1. Upgrade supported Windows App clients and confirm version prerequisites and multipath status
  2. Compare client path diagnostics, public endpoint reachability and ISP routing before rebuilding session hosts
  3. Inspect session connection information and AVD diagnostic connection records for transport details
  4. Validate managed-network RDP Shortpath prerequisites and permitted UDP reachability between client and session host

Explanation

Correct Answer

C:

Inspect session connection information and AVD diagnostic connection records for transport details. Connection transport telemetry distinguishes the user data path independently of general VM health metrics. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Upgrade supported Windows App clients and confirm version prerequisites and multipath status. This would be appropriate for the different task-specific situation "Windows App clients running obsolete builds do not display the expected RDP Multipath transport options", because RDP Multipath feature availability depends on supported client platforms and minimum Windows App versions. It does not directly resolve the stated condition, which calls for Inspect session connection information and AVD diagnostic connection records for transport details.

B:

Compare client path diagnostics, public endpoint reachability and ISP routing before rebuilding session hosts. This would be appropriate for the different task-specific situation "A help desk sees healthy host availability but only one ISP reports failed client-to-service connections", because Client-side internet path failures can prevent broker access without any failure in Azure session-host resources. It does not directly resolve the stated condition, which calls for Inspect session connection information and AVD diagnostic connection records for transport details.

D:

Validate managed-network RDP Shortpath prerequisites and permitted UDP reachability between client and session host. This would be appropriate for the different task-specific situation "Session hosts connect to an on-premises domain controller over ExpressRoute but user sessions still take TCP reverse-connect paths", because RDP Shortpath over a managed network can establish direct UDP transport when client and host have suitable private connectivity. It does not directly resolve the stated condition, which calls for Inspect session connection information and AVD diagnostic connection records for transport details.

Question 164

A support engineer corrects "A deployment chooses a subnet with no remaining IP addresses and newly provisioned session hosts fail to start" by choosing "Expand or select suitable subnets with free addresses and rerun deployment". What mechanism makes that appropriate?

  1. Session-host registration and ongoing broker signaling require reliable agent outbound communication.
  2. AVD service placement depends on completed host-pool registration, not simply Azure VM creation.
  3. Pooled host placement respects configured session limits and load-balancing behavior.
  4. Every session host NIC requires an address from its assigned Azure virtual network subnet.

Explanation

Correct Answer

D:

Every session host NIC requires an address from its assigned Azure virtual network subnet. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Session-host registration and ongoing broker signaling require reliable agent outbound communication. This describes the separate situation "A private host pool is created but none of its session hosts can reach required Microsoft AVD control endpoints" but does not justify the selected fix for the current issue. The decisive behavior is: Every session host NIC requires an address from its assigned Azure virtual network subnet.

B:

AVD service placement depends on completed host-pool registration, not simply Azure VM creation. This describes the separate situation "A PowerShell automation creates only session-host Azure VMs but never registers their AVD agent" but does not justify the selected fix for the current issue. The decisive behavior is: Every session host NIC requires an address from its assigned Azure virtual network subnet.

C:

Pooled host placement respects configured session limits and load-balancing behavior. This describes the separate situation "A pooled host receives far more simultaneous users than planned because its session cap is too high" but does not justify the selected fix for the current issue. The decisive behavior is: Every session host NIC requires an address from its assigned Azure virtual network subnet.

Question 165

Consider this AVD design: Security events from Windows session hosts are not arriving at the central Log Analytics workspace. The action is "Validate Azure Monitor Agent health, data collection rules and workspace destinations". Which statement explains this choice?

  1. Agent-based Windows event collection depends on matching collection rules and authorization.
  2. Aggregated monitoring can reduce alert fatigue without losing evidence of a shared incident.
  3. General VM metrics cannot replace the service-specific events that explain remote resource access failures.
  4. AVD scaling plans can deallocate surplus session hosts according to defined operating periods.

Explanation

Correct Answer

A:

Agent-based Windows event collection depends on matching collection rules and authorization. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

B:

Aggregated monitoring can reduce alert fatigue without losing evidence of a shared incident. This describes the separate situation "The operations team receives hundreds of identical AVD sign-in alerts during one regional network fault" but does not justify the selected fix for the current issue. The decisive behavior is: Agent-based Windows event collection depends on matching collection rules and authorization.

C:

General VM metrics cannot replace the service-specific events that explain remote resource access failures. This describes the separate situation "A team uses a generic Azure VM dashboard and assumes it covers all AVD application group connection failures" but does not justify the selected fix for the current issue. The decisive behavior is: Agent-based Windows event collection depends on matching collection rules and authorization.

D:

AVD scaling plans can deallocate surplus session hosts according to defined operating periods. This describes the separate situation "A pooled host pool runs all its VMs overnight even though no users connect" but does not justify the selected fix for the current issue. The decisive behavior is: Agent-based Windows event collection depends on matching collection rules and authorization.

Question 166

For a deployment problem, "A pooled desktop host's maximum session limit causes users to wait although spare CPU exists on other hosts", administrators choose "Review host pool load balancing and session caps to distribute connections appropriately". Why does that solve it?

  1. Printer redirection can be restricted to reduce unnecessary device exposure and confusion.
  2. Placement settings can prevent optimal use of available pooled compute capacity.
  3. Session control operations are separate from persistent profile storage and application group configuration.
  4. Windows printer selection rules can differ when locally redirected devices are present.

Explanation

Correct Answer

B:

Placement settings can prevent optimal use of available pooled compute capacity. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Printer redirection can be restricted to reduce unnecessary device exposure and confusion. This describes the separate situation "Remote desktop users complain that every connection exposes all their local printers to a sensitive session" but does not justify the selected fix for the current issue. The decisive behavior is: Placement settings can prevent optimal use of available pooled compute capacity.

C:

Session control operations are separate from persistent profile storage and application group configuration. This describes the separate situation "Help desk staff can see an active session that is unresponsive but do not want to delete its user profile" but does not justify the selected fix for the current issue. The decisive behavior is: Placement settings can prevent optimal use of available pooled compute capacity.

D:

Windows printer selection rules can differ when locally redirected devices are present. This describes the separate situation "A remote help desk app prints to local devices but documents always use the wrong default printer" but does not justify the selected fix for the current issue. The decisive behavior is: Placement settings can prevent optimal use of available pooled compute capacity.

Question 167

A support ticket states: A RemoteApp application group is configured but all users see the full desktop instead of the intended app. What is the most targeted remediation?

  1. Validate both Teams optimization status and allowed client camera redirection policies
  2. Remove the app from the managed image or App attach entitlement and roll out a tested deployment change
  3. Check application group type and the published resource selected in the workspace
  4. Configure supported Teams optimization and validate its client and host components

Explanation

Correct Answer

C:

Check application group type and the published resource selected in the workspace. Full desktop and RemoteApp experiences are represented by different AVD application group resources. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Validate both Teams optimization status and allowed client camera redirection policies. This would be appropriate for the different task-specific situation "Microsoft Teams calls work, but user cameras do not appear in sessions after a client policy change", because Teams real-time media and remote device redirection have separate compatibility and policy requirements. It does not directly resolve the stated condition, which calls for Check application group type and the published resource selected in the workspace.

B:

Remove the app from the managed image or App attach entitlement and roll out a tested deployment change. This would be appropriate for the different task-specific situation "An organization must remove an unapproved application from all new AVD sessions while preserving existing profiles", because Application lifecycle controls determine availability, whereas user profile preservation is a separate concern. It does not directly resolve the stated condition, which calls for Check application group type and the published resource selected in the workspace.

D:

Configure supported Teams optimization and validate its client and host components. This would be appropriate for the different task-specific situation "Microsoft Teams voice calls inside AVD consume excessive host CPU because media redirection is inactive", because Teams optimization can redirect eligible audio and video processing to the local endpoint. It does not directly resolve the stated condition, which calls for Check application group type and the published resource selected in the workspace.

Question 168

The approved remediation for "Users lose their settings after session hosts are replaced using a new image version" is "Keep user profiles on FSLogix or another supported roaming store separate from the immutable host image". Which Azure or Windows behavior explains this?

  1. Unfinished servicing operations can make a reusable image unreliable during VM customization.
  2. Traceable image baselines simplify patch compliance and recovery from known OS regressions.
  3. Ring-based image rollout limits the blast radius of unexpected driver or application incompatibilities.
  4. Golden images manage machine configuration, while persistent user state requires an independent storage path.

Explanation

Correct Answer

D:

Golden images manage machine configuration, while persistent user state requires an independent storage path. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Unfinished servicing operations can make a reusable image unreliable during VM customization. This describes the separate situation "A newly captured image includes pending Windows restart actions and fails first-boot provisioning" but does not justify the selected fix for the current issue. The decisive behavior is: Golden images manage machine configuration, while persistent user state requires an independent storage path.

B:

Traceable image baselines simplify patch compliance and recovery from known OS regressions. This describes the separate situation "The team builds session host images without recording which Windows cumulative updates were present" but does not justify the selected fix for the current issue. The decisive behavior is: Golden images manage machine configuration, while persistent user state requires an independent storage path.

C:

Ring-based image rollout limits the blast radius of unexpected driver or application incompatibilities. This describes the separate situation "A host pool rollout should test a new image without moving every user at once" but does not justify the selected fix for the current issue. The decisive behavior is: Golden images manage machine configuration, while persistent user state requires an independent storage path.

Question 169

A change record states "Profile representative user workloads and calculate concurrent bandwidth with latency and headroom requirements" after observing "A call center is moving 900 concurrent users to Azure Virtual Desktop and lacks an estimate of peak RDP throughput". What is the key supporting principle?

  1. Session density and display or multimedia behavior determine actual network capacity more reliably than the number of assigned users alone.
  2. Private Link requires DNS resolution to direct supported service names to private endpoint addresses.
  3. Azure Virtual Desktop's reverse-connect transport requires outbound connectivity from hosts instead of exposing inbound RDP ports to the internet.
  4. Client-side internet path failures can prevent broker access without any failure in Azure session-host resources.

Explanation

Correct Answer

A:

Session density and display or multimedia behavior determine actual network capacity more reliably than the number of assigned users alone. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

B:

Private Link requires DNS resolution to direct supported service names to private endpoint addresses. This describes the separate situation "After creating an AVD private endpoint, connection feeds resolve to public destinations on managed clients" but does not justify the selected fix for the current issue. The decisive behavior is: Session density and display or multimedia behavior determine actual network capacity more reliably than the number of assigned users alone.

C:

Azure Virtual Desktop's reverse-connect transport requires outbound connectivity from hosts instead of exposing inbound RDP ports to the internet. This describes the separate situation "Users connect to the AVD broker but all session hosts fail reverse-connect control channel initialization" but does not justify the selected fix for the current issue. The decisive behavior is: Session density and display or multimedia behavior determine actual network capacity more reliably than the number of assigned users alone.

D:

Client-side internet path failures can prevent broker access without any failure in Azure session-host resources. This describes the separate situation "A help desk sees healthy host availability but only one ISP reports failed client-to-service connections" but does not justify the selected fix for the current issue. The decisive behavior is: Session density and display or multimedia behavior determine actual network capacity more reliably than the number of assigned users alone.

Question 170

An administrator needs to correct the following: An organization needs to disable microphone capture inside remote desktops for a regulated user group. Which action is most relevant?

  1. Deploy a supported Windows App client and validate subscription feed discovery
  2. Configure approved audio capture redirection and device policies at the right assignment scope
  3. Use supported session management to disconnect or sign out the affected session after appropriate notification
  4. Standardize applicable Group Policy or Microsoft Intune configuration profiles for session hosts

Explanation

Correct Answer

B:

Configure approved audio capture redirection and device policies at the right assignment scope. RDP redirection controls the remote session's access to local recording devices. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Deploy a supported Windows App client and validate subscription feed discovery. This would be appropriate for the different task-specific situation "Employees on Windows devices are migrating from a retired Remote Desktop app to current supported access", because Current Azure Virtual Desktop clients determine which remote experiences and transport features users can access. It does not directly resolve the stated condition, which calls for Configure approved audio capture redirection and device policies at the right assignment scope.

C:

Use supported session management to disconnect or sign out the affected session after appropriate notification. This would be appropriate for the different task-specific situation "Help desk staff can see an active session that is unresponsive but do not want to delete its user profile", because Session control operations are separate from persistent profile storage and application group configuration. It does not directly resolve the stated condition, which calls for Configure approved audio capture redirection and device policies at the right assignment scope.

D:

Standardize applicable Group Policy or Microsoft Intune configuration profiles for session hosts. This would be appropriate for the different task-specific situation "A shared host pool has inconsistent Start menu and Windows settings because user policies differ across OUs", because Windows policy processing determines user experience settings independently of the host pool resource definition. It does not directly resolve the stated condition, which calls for Configure approved audio capture redirection and device policies at the right assignment scope.

Configuring and Operating Microsoft Azure Virtual Desktop (AZ-140) Practice Tests

Purchase Individually

  • Premium File

    372 Questions & Answers
    Last Update: Oct 25, 2026

    $76.99
    $69.99
  • Training Course

    79 Lectures

    $43.99
    $39.99
  • Study Guide

    430 Pages

    $43.99
    $39.99

SPECIAL OFFER: GET 10% OFF
This is ONE TIME OFFER

You save
10%

Enter Your Email Address to Receive Your 10% Off Discount Code

SPECIAL OFFER: GET 10% OFF

You save
10%

Use Discount Code:

A confirmation link was sent to your e-mail.

Please check your mailbox for a message from support@examlabs.com and follow the directions.

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your email address below to get started with our interactive software demo of your free trial.

  • Realistic exam simulation and exam editor with preview functions
  • Whole exam in a single file with several different question types
  • Customizable exam-taking mode & detailed score reports