Pass Microsoft Azure AZ-140 Exam in First Attempt Easily
Real Microsoft Azure AZ-140 Exam Questions, Accurate & Verified Answers As Experienced in the Actual Test!

Verified by experts
3 products

You save $69.98

AZ-140 Premium Bundle

  • Premium File 372 Questions & Answers
  • Last Update: Oct 25, 2026
  • Training Course 79 Lectures
  • Study Guide 430 Pages
$79.99 $149.97

Purchase Individually

  • Premium File

    372 Questions & Answers
    Last Update: Oct 25, 2026

    $76.99
    $69.99
  • Training Course

    79 Lectures

    $43.99
    $39.99
  • Study Guide

    430 Pages

    $43.99
    $39.99

Configuring and Operating Microsoft Azure Virtual Desktop AZ-140 Practice Test 26

Question 250

The team adopts "Measure client-to-gateway and client-to-session-host latency, jitter, and loss before resizing VMs" for this AVD requirement: "Remote desktop sessions show poor responsiveness although the session host CPU and memory are healthy". Which explanation is correct?

  1. Azure Virtual Desktop's reverse-connect transport requires outbound connectivity from hosts instead of exposing inbound RDP ports to the internet.
  2. Network latency and packet loss can degrade remote interaction independently of compute utilization.
  3. Private Link requires DNS resolution to direct supported service names to private endpoint addresses.
  4. RDP Multipath maintains multiple potential transport flows per session, increasing port planning requirements.

Explanation

Correct Answer

B:

Network latency and packet loss can degrade remote interaction independently of compute utilization. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Azure Virtual Desktop's reverse-connect transport requires outbound connectivity from hosts instead of exposing inbound RDP ports to the internet. This describes the separate situation "Users connect to the AVD broker but all session hosts fail reverse-connect control channel initialization" but does not justify the selected fix for the current issue. The decisive behavior is: Network latency and packet loss can degrade remote interaction independently of compute utilization.

C:

Private Link requires DNS resolution to direct supported service names to private endpoint addresses. This describes the separate situation "After creating an AVD private endpoint, connection feeds resolve to public destinations on managed clients" but does not justify the selected fix for the current issue. The decisive behavior is: Network latency and packet loss can degrade remote interaction independently of compute utilization.

D:

RDP Multipath maintains multiple potential transport flows per session, increasing port planning requirements. This describes the separate situation "A firewall team plans to allow only one outbound source port for every RDP Multipath session" but does not justify the selected fix for the current issue. The decisive behavior is: Network latency and packet loss can degrade remote interaction independently of compute utilization.

Question 251

For the scenario "The organization needs to exclude transient cache folders from roaming profile containers", a team selects "Configure and test a supported FSLogix redirections.xml policy for selected paths". Which technical principle best explains why it works?

  1. Application masking does not replace Windows privileges or security enforcement for privileged users.
  2. FSLogix can select which users receive profile processing through configured group membership rules.
  3. Profile redirections can keep unnecessary cache data outside the persistent container to reduce profile I/O.
  4. FSLogix profile mount processing depends on explicit and valid configured storage locations.

Explanation

Correct Answer

C:

Profile redirections can keep unnecessary cache data outside the persistent container to reduce profile I/O. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Application masking does not replace Windows privileges or security enforcement for privileged users. This describes the separate situation "An administrator assumes FSLogix App Masking is a full security boundary against a malicious local administrator" but does not justify the selected fix for the current issue. The decisive behavior is: Profile redirections can keep unnecessary cache data outside the persistent container to reduce profile I/O.

B:

FSLogix can select which users receive profile processing through configured group membership rules. This describes the separate situation "A security group requests that only its members receive a special FSLogix configuration" but does not justify the selected fix for the current issue. The decisive behavior is: Profile redirections can keep unnecessary cache data outside the persistent container to reduce profile I/O.

D:

FSLogix profile mount processing depends on explicit and valid configured storage locations. This describes the separate situation "A new FSLogix installation uses a default profile storage location that does not exist" but does not justify the selected fix for the current issue. The decisive behavior is: Profile redirections can keep unnecessary cache data outside the persistent container to reduce profile I/O.

Question 252

The Azure Virtual Desktop team plans to "Choose a pooled host pool with a suitable multi-session Windows client operating system" because: A university computer lab needs many students to share host capacity with no dedicated desktop assignment. Which explanation supports the plan?

  1. A single resource-intensive app does not by itself prove every user needs dedicated desktop infrastructure.
  2. User-to-compute proximity and available regional VM families affect user experience.
  3. Dedicated assignment can increase idle compute spend while pooling trades isolation for consolidation.
  4. Pooled session hosts allow multiple eligible users to share VMs and reduce unused capacity.

Explanation

Correct Answer

D:

Pooled session hosts allow multiple eligible users to share VMs and reduce unused capacity. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

A single resource-intensive app does not by itself prove every user needs dedicated desktop infrastructure. This describes the separate situation "A planning team proposes replacing all pooled desktops with personal VMs after noticing one application's high CPU use" but does not justify the selected fix for the current issue. The decisive behavior is: Pooled session hosts allow multiple eligible users to share VMs and reduce unused capacity.

B:

User-to-compute proximity and available regional VM families affect user experience. This describes the separate situation "A global desktop deployment experiences unacceptable latency because all hosts are located far from users" but does not justify the selected fix for the current issue. The decisive behavior is: Pooled session hosts allow multiple eligible users to share VMs and reduce unused capacity.

C:

Dedicated assignment can increase idle compute spend while pooling trades isolation for consolidation. This describes the separate situation "A finance review must compare always-on personal desktops with pooled autoscaled desktops" but does not justify the selected fix for the current issue. The decisive behavior is: Pooled session hosts allow multiple eligible users to share VMs and reduce unused capacity.

Question 253

An enterprise AVD deployment has this requirement: Host pools across two regions require the same tested Windows multi-session image release. Choose the most appropriate implementation.

  1. Publish an Azure Compute Gallery image version with supported regional replication
  2. Follow the supported AVD agent provisioning workflow and register each deployed host separately
  3. Remove per-user artifacts and validate image generalization before publishing
  4. Add application smoke tests under a representative nonadministrator session before promoting the image

Explanation

Correct Answer

A:

Publish an Azure Compute Gallery image version with supported regional replication. Azure Compute Gallery can distribute versioned image artifacts to configured regions for VM deployment. This action directly addresses the conditions in the scenario.

Incorrect Answers

B:

Follow the supported AVD agent provisioning workflow and register each deployed host separately. This would be appropriate for the different task-specific situation "Administrators install AVD agents manually on an image and accidentally bake an existing host-pool registration into it", because Agent registration represents an individual session host relationship and should not be cloned as a persistent identity. It does not directly resolve the stated condition, which calls for Publish an Azure Compute Gallery image version with supported regional replication.

C:

Remove per-user artifacts and validate image generalization before publishing. This would be appropriate for the different task-specific situation "An image build installs a user-specific browser profile under an administrator account that later appears on all hosts", because A reusable desktop image should not include personalized data from the build operator. It does not directly resolve the stated condition, which calls for Publish an Azure Compute Gallery image version with supported regional replication.

D:

Add application smoke tests under a representative nonadministrator session before promoting the image. This would be appropriate for the different task-specific situation "An image builder pipeline succeeds but installed line-of-business applications fail the first standard-user login", because Image creation success does not prove end-user compatibility or permission correctness. It does not directly resolve the stated condition, which calls for Publish an Azure Compute Gallery image version with supported regional replication.

Question 254

The operations team reports the following symptom: Desktop sessions experience long logoff delays when very large profile disks upload changes. Which action should be taken first?

  1. Use App Masking for user experience and entitlement presentation, plus real access or execution security controls
  2. Analyze FSLogix container size, SMB performance and Cloud Cache synchronization backlog
  3. Implement FSLogix App Masking rule sets and assign their scope through user groups
  4. Enable FSLogix Profile Containers with accessible supported roaming storage

Explanation

Correct Answer

B:

Analyze FSLogix container size, SMB performance and Cloud Cache synchronization backlog. Profile detach and cache synchronization can lengthen sign-out when remote storage is saturated. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Use App Masking for user experience and entitlement presentation, plus real access or execution security controls. This would be appropriate for the different task-specific situation "An administrator assumes FSLogix App Masking is a full security boundary against a malicious local administrator", because Application masking does not replace Windows privileges or security enforcement for privileged users. It does not directly resolve the stated condition, which calls for Analyze FSLogix container size, SMB performance and Cloud Cache synchronization backlog.

C:

Implement FSLogix App Masking rule sets and assign their scope through user groups. This would be appropriate for the different task-specific situation "An application that is installed on all pooled session hosts must be hidden from nonlicensed users", because App Masking can control application visibility without reinstalling the app per user. It does not directly resolve the stated condition, which calls for Analyze FSLogix container size, SMB performance and Cloud Cache synchronization backlog.

D:

Enable FSLogix Profile Containers with accessible supported roaming storage. This would be appropriate for the different task-specific situation "Users lose desktop personalization every time a pooled Azure Virtual Desktop session host is rebuilt", because A profile container stores the user's Windows profile in a portable virtual disk instead of on an individual host. It does not directly resolve the stated condition, which calls for Analyze FSLogix container size, SMB performance and Cloud Cache synchronization backlog.

Question 255

While preparing session hosts, an engineer discovers: A user connects successfully but their published resources never appear in the client feed. Which change best meets the requirement?

  1. Verify compatible client versions and AVD Teams optimization components and settings
  2. Upgrade to supported Windows App versions and validate RDP Multipath connection status
  3. Confirm their application group assignments, workspace association and feed refresh
  4. Check the client-supported camera redirection settings and OS privacy permissions

Explanation

Correct Answer

C:

Confirm their application group assignments, workspace association and feed refresh. Resource discovery reflects workspace entitlements separately from the ability to authenticate. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Verify compatible client versions and AVD Teams optimization components and settings. This would be appropriate for the different task-specific situation "Screen sharing through a remote desktop performs poorly because Teams media optimization is not active", because Teams multimedia optimization can offload real-time media processing to the client when all prerequisites are met. It does not directly resolve the stated condition, which calls for Confirm their application group assignments, workspace association and feed refresh.

B:

Upgrade to supported Windows App versions and validate RDP Multipath connection status. This would be appropriate for the different task-specific situation "Users on older client builds frequently lose sessions during network roaming and do not get current multipath capabilities", because Newer supported clients can use more resilient RDP transport paths and connection information surfaces. It does not directly resolve the stated condition, which calls for Confirm their application group assignments, workspace association and feed refresh.

D:

Check the client-supported camera redirection settings and OS privacy permissions. This would be appropriate for the different task-specific situation "A remote meeting app cannot access the laptop's webcam even though the host has a working network", because Webcam use in remote sessions requires a supported client and permitted redirected device channel. It does not directly resolve the stated condition, which calls for Confirm their application group assignments, workspace association and feed refresh.

Question 256

For a deployment problem, "OneDrive sync fills session host OS disks because large synchronized files are cached without capacity controls", administrators choose "Configure Files On-Demand and appropriate profile or storage capacity planning". Why does that solve it?

  1. Media optimization depends on compatibility across the endpoint client and session-host software.
  2. Application package lifecycle changes may require a new session or supported refresh process to take effect.
  3. Application lifecycle controls determine availability, whereas user profile preservation is a separate concern.
  4. Files On-Demand reduces unnecessary full-content downloads for eligible OneDrive files.

Explanation

Correct Answer

D:

Files On-Demand reduces unnecessary full-content downloads for eligible OneDrive files. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Media optimization depends on compatibility across the endpoint client and session-host software. This describes the separate situation "A help desk reports that the Teams optimization status shows not optimized for a portion of users" but does not justify the selected fix for the current issue. The decisive behavior is: Files On-Demand reduces unnecessary full-content downloads for eligible OneDrive files.

B:

Application package lifecycle changes may require a new session or supported refresh process to take effect. This describes the separate situation "An operations team expects replacing an App attach package image to update every existing user session instantly" but does not justify the selected fix for the current issue. The decisive behavior is: Files On-Demand reduces unnecessary full-content downloads for eligible OneDrive files.

C:

Application lifecycle controls determine availability, whereas user profile preservation is a separate concern. This describes the separate situation "An organization must remove an unapproved application from all new AVD sessions while preserving existing profiles" but does not justify the selected fix for the current issue. The decisive behavior is: Files On-Demand reduces unnecessary full-content downloads for eligible OneDrive files.

Question 257

A support ticket states: An organization wants its profile storage to tolerate a full Azure region outage. What is the most targeted remediation?

  1. Design a supported cross-region recovery solution with tested profile replication or backup and DNS cutover
  2. Evaluate supported regional placement for both storage and session hosts before increasing CPU
  3. Analyze volume service-level throughput and resize capacity or throughput settings as supported
  4. Verify the file service supports the required Kerberos encryption types and update configurations consistently

Explanation

Correct Answer

A:

Design a supported cross-region recovery solution with tested profile replication or backup and DNS cutover. Zone redundancy protects a zonal failure but does not alone provide recovery from a region-wide outage. This action directly addresses the conditions in the scenario.

Incorrect Answers

B:

Evaluate supported regional placement for both storage and session hosts before increasing CPU. This would be appropriate for the different task-specific situation "A large host pool accesses a profile storage volume from a different region over a high-latency path", because Remote file operations across regional boundaries can add material profile mount latency. It does not directly resolve the stated condition, which calls for Design a supported cross-region recovery solution with tested profile replication or backup and DNS cutover.

C:

Analyze volume service-level throughput and resize capacity or throughput settings as supported. This would be appropriate for the different task-specific situation "An Azure NetApp Files volume experiences sustained throughput pressure during simultaneous profile logons", because ANF throughput and service-level quotas can constrain FSLogix operations under aggregate login load. It does not directly resolve the stated condition, which calls for Design a supported cross-region recovery solution with tested profile replication or backup and DNS cutover.

D:

Verify the file service supports the required Kerberos encryption types and update configurations consistently. This would be appropriate for the different task-specific situation "Operators see intermittent SMB authentication failures after Kerberos encryption policies are hardened", because A Kerberos encryption mismatch between clients and SMB storage can prevent profile-container access. It does not directly resolve the stated condition, which calls for Design a supported cross-region recovery solution with tested profile replication or backup and DNS cutover.

Question 258

During an Azure Virtual Desktop migration, this problem appears: A security group allows all inbound network traffic to pooled session hosts for troubleshooting. Which solution fits?

  1. Use Defender for Cloud just-in-time VM access or an equivalent approved controlled management channel
  2. Narrow NSG rules to documented necessary sources and service ports
  3. Apply Conditional Access and secure administrative access workflows to sensitive AVD operations
  4. Plan outbound Azure Firewall or supported network filtering based on AVD required endpoint documentation

Explanation

Correct Answer

B:

Narrow NSG rules to documented necessary sources and service ports. NSGs enforce network filtering and broad inbound allows enlarge the reachable attack surface. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Use Defender for Cloud just-in-time VM access or an equivalent approved controlled management channel. This would be appropriate for the different task-specific situation "Operations staff require emergency access to session hosts only during a time-limited incident", because JIT access reduces persistent inbound management exposure by opening time-bound authorized paths. It does not directly resolve the stated condition, which calls for Narrow NSG rules to documented necessary sources and service ports.

C:

Apply Conditional Access and secure administrative access workflows to sensitive AVD operations. This would be appropriate for the different task-specific situation "Privileged operators connect from untrusted devices to production session hosts without strong authentication controls", because Strong identity and device conditions reduce the risk of unauthorized high-impact management activity. It does not directly resolve the stated condition, which calls for Narrow NSG rules to documented necessary sources and service ports.

D:

Plan outbound Azure Firewall or supported network filtering based on AVD required endpoint documentation. This would be appropriate for the different task-specific situation "A security team wants to restrict which outbound destinations session hosts can reach without breaking the broker", because Controlled egress must preserve mandatory control, authentication and workload communication paths. It does not directly resolve the stated condition, which calls for Narrow NSG rules to documented necessary sources and service ports.

Question 259

A change record states "Stage updates through maintenance rings and preserve enough healthy capacity for active sessions" after observing "An administrator applies a cumulative update to every session host simultaneously and all users are disconnected". What is the key supporting principle?

  1. End-to-end AVD continuity depends on restoring usable sessions, not merely confirming backups exist.
  2. Point-in-time snapshots help recover profile volumes from accidental modification or corruption.
  3. Rolling updates retain service availability when a subset of hosts is undergoing maintenance.
  4. Decommissioning while users are active can lose unsaved work or interrupt profile disk detach.

Explanation

Correct Answer

C:

Rolling updates retain service availability when a subset of hosts is undergoing maintenance. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

End-to-end AVD continuity depends on restoring usable sessions, not merely confirming backups exist. This describes the separate situation "The disaster recovery documentation contains a list of backup services but no tested routing or client reconnect process" but does not justify the selected fix for the current issue. The decisive behavior is: Rolling updates retain service availability when a subset of hosts is undergoing maintenance.

B:

Point-in-time snapshots help recover profile volumes from accidental modification or corruption. This describes the separate situation "Azure NetApp Files stores FSLogix data but no immutable recovery schedule is defined" but does not justify the selected fix for the current issue. The decisive behavior is: Rolling updates retain service availability when a subset of hosts is undergoing maintenance.

D:

Decommissioning while users are active can lose unsaved work or interrupt profile disk detach. This describes the separate situation "A host pool must be retired but some users still have active sessions and unsaved documents" but does not justify the selected fix for the current issue. The decisive behavior is: Rolling updates retain service availability when a subset of hosts is undergoing maintenance.

Question 260

The team adopts "Correlate FSLogix logs, SMB storage performance and AVD connection timing" for this AVD requirement: "The AVD service desk sees rising sign-in time but has no profile mount or storage latency diagnostics". Which explanation is correct?

  1. General VM metrics cannot replace the service-specific events that explain remote resource access failures.
  2. Historical diagnostics can reconstruct the involved hosts beyond the currently active session list.
  3. Scaling automation is limited by plan design and available compute resources.
  4. A slow sign-in can stem from profile storage or user logon stages rather than the AVD broker.

Explanation

Correct Answer

D:

A slow sign-in can stem from profile storage or user logon stages rather than the AVD broker. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

General VM metrics cannot replace the service-specific events that explain remote resource access failures. This describes the separate situation "A team uses a generic Azure VM dashboard and assumes it covers all AVD application group connection failures" but does not justify the selected fix for the current issue. The decisive behavior is: A slow sign-in can stem from profile storage or user logon stages rather than the AVD broker.

B:

Historical diagnostics can reconstruct the involved hosts beyond the currently active session list. This describes the separate situation "An admin wants to know which session hosts actually accepted connections before a maintenance incident" but does not justify the selected fix for the current issue. The decisive behavior is: A slow sign-in can stem from profile storage or user logon stages rather than the AVD broker.

C:

Scaling automation is limited by plan design and available compute resources. This describes the separate situation "A help desk expects a scaling plan to instantly create an unlimited number of session host VMs" but does not justify the selected fix for the current issue. The decisive behavior is: A slow sign-in can stem from profile storage or user logon stages rather than the AVD broker.

Configuring and Operating Microsoft Azure Virtual Desktop (AZ-140) Practice Tests

Purchase Individually

  • Premium File

    372 Questions & Answers
    Last Update: Oct 25, 2026

    $76.99
    $69.99
  • Training Course

    79 Lectures

    $43.99
    $39.99
  • Study Guide

    430 Pages

    $43.99
    $39.99

SPECIAL OFFER: GET 10% OFF
This is ONE TIME OFFER

You save
10%

Enter Your Email Address to Receive Your 10% Off Discount Code

SPECIAL OFFER: GET 10% OFF

You save
10%

Use Discount Code:

A confirmation link was sent to your e-mail.

Please check your mailbox for a message from support@examlabs.com and follow the directions.

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your email address below to get started with our interactive software demo of your free trial.

  • Realistic exam simulation and exam editor with preview functions
  • Whole exam in a single file with several different question types
  • Customizable exam-taking mode & detailed score reports