Pass Microsoft Azure AZ-140 Exam in First Attempt Easily
Real Microsoft Azure AZ-140 Exam Questions, Accurate & Verified Answers As Experienced in the Actual Test!

Verified by experts
3 products

You save $69.98

AZ-140 Premium Bundle

  • Premium File 372 Questions & Answers
  • Last Update: Oct 25, 2026
  • Training Course 79 Lectures
  • Study Guide 430 Pages
$79.99 $149.97

Purchase Individually

  • Premium File

    372 Questions & Answers
    Last Update: Oct 25, 2026

    $76.99
    $69.99
  • Training Course

    79 Lectures

    $43.99
    $39.99
  • Study Guide

    430 Pages

    $43.99
    $39.99

Configuring and Operating Microsoft Azure Virtual Desktop AZ-140 Practice Test 21

Question 200

The team adopts "Verify the package image location, share access, identity and host permissions" for this AVD requirement: "An App attach package is uploaded but users receive a package mounting or accessibility error". Which explanation is correct?

  1. Application lifecycle controls determine availability, whereas user profile preservation is a separate concern.
  2. Teams optimization can redirect eligible audio and video processing to the local endpoint.
  3. Applications with system-level dependencies often require installation before shared users sign in.
  4. App attach requires session hosts to read or mount the package artifact at the configured storage path.

Explanation

Correct Answer

D:

App attach requires session hosts to read or mount the package artifact at the configured storage path. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Application lifecycle controls determine availability, whereas user profile preservation is a separate concern. This describes the separate situation "An organization must remove an unapproved application from all new AVD sessions while preserving existing profiles" but does not justify the selected fix for the current issue. The decisive behavior is: App attach requires session hosts to read or mount the package artifact at the configured storage path.

B:

Teams optimization can redirect eligible audio and video processing to the local endpoint. This describes the separate situation "Microsoft Teams voice calls inside AVD consume excessive host CPU because media redirection is inactive" but does not justify the selected fix for the current issue. The decisive behavior is: App attach requires session hosts to read or mount the package artifact at the configured storage path.

C:

Applications with system-level dependencies often require installation before shared users sign in. This describes the separate situation "A line-of-business app needs a machine-wide registry key and service that cannot be delivered reliably per user" but does not justify the selected fix for the current issue. The decisive behavior is: App attach requires session hosts to read or mount the package artifact at the configured storage path.

Question 201

An Azure Virtual Desktop administrator observes: Users connect to the AVD broker but all session hosts fail reverse-connect control channel initialization. Which response directly addresses this issue?

  1. Check required outbound TCP 443 access from session hosts to Azure Virtual Desktop service endpoints
  2. Upgrade supported Windows App clients and confirm version prerequisites and multipath status
  3. Inspect session connection information and AVD diagnostic connection records for transport details
  4. Verify supported RDP Multipath client versions and monitor transport failover events

Explanation

Correct Answer

A:

Check required outbound TCP 443 access from session hosts to Azure Virtual Desktop service endpoints. Azure Virtual Desktop's reverse-connect transport requires outbound connectivity from hosts instead of exposing inbound RDP ports to the internet. This action directly addresses the conditions in the scenario.

Incorrect Answers

B:

Upgrade supported Windows App clients and confirm version prerequisites and multipath status. This would be appropriate for the different task-specific situation "Windows App clients running obsolete builds do not display the expected RDP Multipath transport options", because RDP Multipath feature availability depends on supported client platforms and minimum Windows App versions. It does not directly resolve the stated condition, which calls for Check required outbound TCP 443 access from session hosts to Azure Virtual Desktop service endpoints.

C:

Inspect session connection information and AVD diagnostic connection records for transport details. This would be appropriate for the different task-specific situation "The team wants to identify whether AVD sessions used UDP Shortpath or TCP fallback during a fault", because Connection transport telemetry distinguishes the user data path independently of general VM health metrics. It does not directly resolve the stated condition, which calls for Check required outbound TCP 443 access from session hosts to Azure Virtual Desktop service endpoints.

D:

Verify supported RDP Multipath client versions and monitor transport failover events. This would be appropriate for the different task-specific situation "Users report session drops when their laptops roam between Wi-Fi and mobile connectivity", because Multipath can switch among viable backup UDP or TCP paths when an active session route degrades. It does not directly resolve the stated condition, which calls for Check required outbound TCP 443 access from session hosts to Azure Virtual Desktop service endpoints.

Question 202

A Microsoft AZ-140 deployment review finds: An organization wants to consolidate user sessions onto fewer powered-on hosts to reduce compute spend. What is the best corrective action?

  1. Profile multimedia redirection effectiveness and VM CPU or memory needs during representative collaboration workloads
  2. Configure depth-first load balancing with appropriate session limits and autoscale controls
  3. Pilot realistic application sessions and adjust VM memory or host count based on monitoring
  4. Test workload isolation, sizing and optimized application delivery before changing the entire assignment model

Explanation

Correct Answer

B:

Configure depth-first load balancing with appropriate session limits and autoscale controls. Depth-first fills eligible session hosts toward capacity before using additional hosts. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Profile multimedia redirection effectiveness and VM CPU or memory needs during representative collaboration workloads. This would be appropriate for the different task-specific situation "User density drops sharply when Teams video meetings begin on a busy pooled host", because Real-time collaboration behavior can materially change session-host user density and performance. It does not directly resolve the stated condition, which calls for Configure depth-first load balancing with appropriate session limits and autoscale controls.

C:

Pilot realistic application sessions and adjust VM memory or host count based on monitoring. This would be appropriate for the different task-specific situation "An enterprise chooses a very small VM type for 15 Office users without measuring memory pressure", because Available memory and application working sets bound stable multi-session density. It does not directly resolve the stated condition, which calls for Configure depth-first load balancing with appropriate session limits and autoscale controls.

D:

Test workload isolation, sizing and optimized application delivery before changing the entire assignment model. This would be appropriate for the different task-specific situation "A planning team proposes replacing all pooled desktops with personal VMs after noticing one application's high CPU use", because A single resource-intensive app does not by itself prove every user needs dedicated desktop infrastructure. It does not directly resolve the stated condition, which calls for Configure depth-first load balancing with appropriate session limits and autoscale controls.

Question 203

An AZ-140 reviewer recommends "Evaluate supported regional placement for both storage and session hosts before increasing CPU" for the issue "A large host pool accesses a profile storage volume from a different region over a high-latency path". Which underlying behavior is decisive?

  1. Zone redundancy protects a zonal failure but does not alone provide recovery from a region-wide outage.
  2. A private endpoint's existence does not automatically grant connectivity and name resolution from all peered networks.
  3. Remote file operations across regional boundaries can add material profile mount latency.
  4. Azure NetApp Files SMB shares use directory services for identity and access control.

Explanation

Correct Answer

C:

Remote file operations across regional boundaries can add material profile mount latency. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Zone redundancy protects a zonal failure but does not alone provide recovery from a region-wide outage. This describes the separate situation "An organization wants its profile storage to tolerate a full Azure region outage" but does not justify the selected fix for the current issue. The decisive behavior is: Remote file operations across regional boundaries can add material profile mount latency.

B:

A private endpoint's existence does not automatically grant connectivity and name resolution from all peered networks. This describes the separate situation "An SMB private endpoint is reachable from one VNet but inaccessible from another peered workspace VNet" but does not justify the selected fix for the current issue. The decisive behavior is: Remote file operations across regional boundaries can add material profile mount latency.

D:

Azure NetApp Files SMB shares use directory services for identity and access control. This describes the separate situation "An SMB volume on Azure NetApp Files must use Active Directory credentials but has no directory integration" but does not justify the selected fix for the current issue. The decisive behavior is: Remote file operations across regional boundaries can add material profile mount latency.

Question 204

The operations team reports the following symptom: An administrator wants a repeatable dashboard for session hosts, sign-ins and connection reliability. Which action should be taken first?

  1. Use threshold aggregation and alert grouping while preserving actionable connection errors
  2. Tune ramp-down session handling, disconnect timeout and deallocation policies
  3. Use session counts and host availability trends to refine scaling plan ramp-up times
  4. Configure and customize Azure Virtual Desktop Insights with required diagnostic data sources

Explanation

Correct Answer

D:

Configure and customize Azure Virtual Desktop Insights with required diagnostic data sources. AVD Insights workbooks combine service and host telemetry into operational views. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Use threshold aggregation and alert grouping while preserving actionable connection errors. This would be appropriate for the different task-specific situation "The operations team receives hundreds of identical AVD sign-in alerts during one regional network fault", because Aggregated monitoring can reduce alert fatigue without losing evidence of a shared incident. It does not directly resolve the stated condition, which calls for Configure and customize Azure Virtual Desktop Insights with required diagnostic data sources.

B:

Tune ramp-down session handling, disconnect timeout and deallocation policies. This would be appropriate for the different task-specific situation "A scaling plan powers off hosts too aggressively while employees have disconnected but resumable sessions", because Autoscale decisions must account for existing user session state to avoid disruption. It does not directly resolve the stated condition, which calls for Configure and customize Azure Virtual Desktop Insights with required diagnostic data sources.

C:

Use session counts and host availability trends to refine scaling plan ramp-up times. This would be appropriate for the different task-specific situation "A host pool shows insufficient available session capacity during a predictable daily spike", because Scaling before known peak demand helps ensure ready capacity is available at sign-in. It does not directly resolve the stated condition, which calls for Configure and customize Azure Virtual Desktop Insights with required diagnostic data sources.

Question 205

Consider this AVD design: The enterprise firewall permits a few static AVD IP addresses but connections fail after Microsoft service changes. The action is "Use the documented Azure Virtual Desktop required endpoint and service-tag guidance instead of a fragile hard-coded address list". Which statement explains this choice?

  1. Service endpoints and IP ranges can change, so supported FQDN and service-tag approaches simplify maintained egress policies.
  2. Multipath can switch among viable backup UDP or TCP paths when an active session route degrades.
  3. RDP Shortpath over a managed network can establish direct UDP transport when client and host have suitable private connectivity.
  4. QoS traffic classification can protect latency-sensitive remote desktop flows under congestion.

Explanation

Correct Answer

A:

Service endpoints and IP ranges can change, so supported FQDN and service-tag approaches simplify maintained egress policies. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

B:

Multipath can switch among viable backup UDP or TCP paths when an active session route degrades. This describes the separate situation "Users report session drops when their laptops roam between Wi-Fi and mobile connectivity" but does not justify the selected fix for the current issue. The decisive behavior is: Service endpoints and IP ranges can change, so supported FQDN and service-tag approaches simplify maintained egress policies.

C:

RDP Shortpath over a managed network can establish direct UDP transport when client and host have suitable private connectivity. This describes the separate situation "Session hosts connect to an on-premises domain controller over ExpressRoute but user sessions still take TCP reverse-connect paths" but does not justify the selected fix for the current issue. The decisive behavior is: Service endpoints and IP ranges can change, so supported FQDN and service-tag approaches simplify maintained egress policies.

D:

QoS traffic classification can protect latency-sensitive remote desktop flows under congestion. This describes the separate situation "A branch has competing real-time desktop audio and bulk file traffic over one constrained WAN circuit" but does not justify the selected fix for the current issue. The decisive behavior is: Service endpoints and IP ranges can change, so supported FQDN and service-tag approaches simplify maintained egress policies.

Question 206

For a deployment problem, "The team builds session host images without recording which Windows cumulative updates were present", administrators choose "Record OS build and installed patch level as part of every image release and compliance check". Why does that solve it?

  1. Compute Gallery image definitions distinguish generalized images from specialized VM images.
  2. Traceable image baselines simplify patch compliance and recovery from known OS regressions.
  3. Multi-session compatibility can depend on system-wide installation and shared activation patterns.
  4. Every new host inherits the software baseline present in the source image at provisioning time.

Explanation

Correct Answer

B:

Traceable image baselines simplify patch compliance and recovery from known OS regressions. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Compute Gallery image definitions distinguish generalized images from specialized VM images. This describes the separate situation "Operations needs a way to describe whether a gallery image uses generalized or specialized OS state" but does not justify the selected fix for the current issue. The decisive behavior is: Traceable image baselines simplify patch compliance and recovery from known OS regressions.

C:

Multi-session compatibility can depend on system-wide installation and shared activation patterns. This describes the separate situation "An image deployment plan uses a multi-session client image with unsupported application installation sequence" but does not justify the selected fix for the current issue. The decisive behavior is: Traceable image baselines simplify patch compliance and recovery from known OS regressions.

D:

Every new host inherits the software baseline present in the source image at provisioning time. This describes the separate situation "An image capture is made before required Microsoft 365 Apps and FSLogix components are installed" but does not justify the selected fix for the current issue. The decisive behavior is: Traceable image baselines simplify patch compliance and recovery from known OS regressions.

Question 207

A support ticket states: Employees on Windows devices are migrating from a retired Remote Desktop app to current supported access. What is the most targeted remediation?

  1. Set suitable disconnect and idle session timeout policies and test their effects
  2. Configure Universal Print or another supported remote printing workflow with user permissions
  3. Deploy a supported Windows App client and validate subscription feed discovery
  4. Use supported session management to disconnect or sign out the affected session after appropriate notification

Explanation

Correct Answer

C:

Deploy a supported Windows App client and validate subscription feed discovery. Current Azure Virtual Desktop clients determine which remote experiences and transport features users can access. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Set suitable disconnect and idle session timeout policies and test their effects. This would be appropriate for the different task-specific situation "A user disconnects and leaves an idle session consuming capacity for many hours", because Remote session timeout policies can terminate abandoned sessions to free pooled capacity. It does not directly resolve the stated condition, which calls for Deploy a supported Windows App client and validate subscription feed discovery.

B:

Configure Universal Print or another supported remote printing workflow with user permissions. This would be appropriate for the different task-specific situation "Office employees cannot print to a managed company printer from remote AVD sessions", because Printer availability depends on the configured print service and the session's printer redirection policy. It does not directly resolve the stated condition, which calls for Deploy a supported Windows App client and validate subscription feed discovery.

D:

Use supported session management to disconnect or sign out the affected session after appropriate notification. This would be appropriate for the different task-specific situation "Help desk staff can see an active session that is unresponsive but do not want to delete its user profile", because Session control operations are separate from persistent profile storage and application group configuration. It does not directly resolve the stated condition, which calls for Deploy a supported Windows App client and validate subscription feed discovery.

Question 208

During an Azure Virtual Desktop migration, this problem appears: Users have local administrator rights on pooled session hosts solely to install a browser extension. Which solution fits?

  1. Use Defender for Cloud just-in-time VM access or an equivalent approved controlled management channel
  2. Apply Conditional Access and secure administrative access workflows to sensitive AVD operations
  3. Apply a supported disk encryption approach and audit compliance against the policy
  4. Remove unnecessary local admin membership and provide a managed application deployment process

Explanation

Correct Answer

D:

Remove unnecessary local admin membership and provide a managed application deployment process. Local administrator privileges on shared hosts increase potential cross-user and system compromise. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Use Defender for Cloud just-in-time VM access or an equivalent approved controlled management channel. This would be appropriate for the different task-specific situation "Operations staff require emergency access to session hosts only during a time-limited incident", because JIT access reduces persistent inbound management exposure by opening time-bound authorized paths. It does not directly resolve the stated condition, which calls for Remove unnecessary local admin membership and provide a managed application deployment process.

B:

Apply Conditional Access and secure administrative access workflows to sensitive AVD operations. This would be appropriate for the different task-specific situation "Privileged operators connect from untrusted devices to production session hosts without strong authentication controls", because Strong identity and device conditions reduce the risk of unauthorized high-impact management activity. It does not directly resolve the stated condition, which calls for Remove unnecessary local admin membership and provide a managed application deployment process.

C:

Apply a supported disk encryption approach and audit compliance against the policy. This would be appropriate for the different task-specific situation "Azure Policy audit shows AVD session-host disks without required encryption configuration", because Storage encryption controls protect data at rest independently of access-control lists. It does not directly resolve the stated condition, which calls for Remove unnecessary local admin membership and provide a managed application deployment process.

Question 209

A change record states "Check application group type and the published resource selected in the workspace" after observing "A RemoteApp application group is configured but all users see the full desktop instead of the intended app". What is the key supporting principle?

  1. Full desktop and RemoteApp experiences are represented by different AVD application group resources.
  2. Applications with system-level dependencies often require installation before shared users sign in.
  3. App attach requires session hosts to read or mount the package artifact at the configured storage path.
  4. Managed browser extension policies control allowed and required extensions without manual per-user installation.

Explanation

Correct Answer

A:

Full desktop and RemoteApp experiences are represented by different AVD application group resources. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

B:

Applications with system-level dependencies often require installation before shared users sign in. This describes the separate situation "A line-of-business app needs a machine-wide registry key and service that cannot be delivered reliably per user" but does not justify the selected fix for the current issue. The decisive behavior is: Full desktop and RemoteApp experiences are represented by different AVD application group resources.

C:

App attach requires session hosts to read or mount the package artifact at the configured storage path. This describes the separate situation "An App attach package is uploaded but users receive a package mounting or accessibility error" but does not justify the selected fix for the current issue. The decisive behavior is: Full desktop and RemoteApp experiences are represented by different AVD application group resources.

D:

Managed browser extension policies control allowed and required extensions without manual per-user installation. This describes the separate situation "A browser extension must be available only for a permitted business department" but does not justify the selected fix for the current issue. The decisive behavior is: Full desktop and RemoteApp experiences are represented by different AVD application group resources.

Question 210

An administrator needs to correct the following: A university computer lab needs many students to share host capacity with no dedicated desktop assignment. Which action is most relevant?

  1. Design an AVD scaling plan with minimum capacity, schedules and Start VM on Connect as appropriate
  2. Choose a pooled host pool with a suitable multi-session Windows client operating system
  3. Organize subscriptions with management groups and apply Azure Policy at appropriate scopes
  4. Test workload isolation, sizing and optimized application delivery before changing the entire assignment model

Explanation

Correct Answer

B:

Choose a pooled host pool with a suitable multi-session Windows client operating system. Pooled session hosts allow multiple eligible users to share VMs and reduce unused capacity. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Design an AVD scaling plan with minimum capacity, schedules and Start VM on Connect as appropriate. This would be appropriate for the different task-specific situation "Administrators want to minimize cold host start costs during non-business hours", because Autoscale can power down surplus hosts, but sufficient capacity and start-up behavior must still support user sign-ins. It does not directly resolve the stated condition, which calls for Choose a pooled host pool with a suitable multi-session Windows client operating system.

C:

Organize subscriptions with management groups and apply Azure Policy at appropriate scopes. This would be appropriate for the different task-specific situation "The business wants a policy boundary for virtual desktop workloads across multiple subscriptions", because Management groups provide governance and policy inheritance across subscription hierarchies. It does not directly resolve the stated condition, which calls for Choose a pooled host pool with a suitable multi-session Windows client operating system.

D:

Test workload isolation, sizing and optimized application delivery before changing the entire assignment model. This would be appropriate for the different task-specific situation "A planning team proposes replacing all pooled desktops with personal VMs after noticing one application's high CPU use", because A single resource-intensive app does not by itself prove every user needs dedicated desktop infrastructure. It does not directly resolve the stated condition, which calls for Choose a pooled host pool with a suitable multi-session Windows client operating system.

Configuring and Operating Microsoft Azure Virtual Desktop (AZ-140) Practice Tests

Purchase Individually

  • Premium File

    372 Questions & Answers
    Last Update: Oct 25, 2026

    $76.99
    $69.99
  • Training Course

    79 Lectures

    $43.99
    $39.99
  • Study Guide

    430 Pages

    $43.99
    $39.99

SPECIAL OFFER: GET 10% OFF
This is ONE TIME OFFER

You save
10%

Enter Your Email Address to Receive Your 10% Off Discount Code

SPECIAL OFFER: GET 10% OFF

You save
10%

Use Discount Code:

A confirmation link was sent to your e-mail.

Please check your mailbox for a message from support@examlabs.com and follow the directions.

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your email address below to get started with our interactive software demo of your free trial.

  • Realistic exam simulation and exam editor with preview functions
  • Whole exam in a single file with several different question types
  • Customizable exam-taking mode & detailed score reports