Pass Microsoft Azure AZ-140 Exam in First Attempt Easily
Real Microsoft Azure AZ-140 Exam Questions, Accurate & Verified Answers As Experienced in the Actual Test!

Verified by experts
3 products

You save $69.98

AZ-140 Premium Bundle

  • Premium File 372 Questions & Answers
  • Last Update: Oct 25, 2026
  • Training Course 79 Lectures
  • Study Guide 430 Pages
$79.99 $149.97

Purchase Individually

  • Premium File

    372 Questions & Answers
    Last Update: Oct 25, 2026

    $76.99
    $69.99
  • Training Course

    79 Lectures

    $43.99
    $39.99
  • Study Guide

    430 Pages

    $43.99
    $39.99

Configuring and Operating Microsoft Azure Virtual Desktop AZ-140 Practice Test 27

Question 260

The team adopts "Correlate FSLogix logs, SMB storage performance and AVD connection timing" for this AVD requirement: "The AVD service desk sees rising sign-in time but has no profile mount or storage latency diagnostics". Which explanation is correct?

  1. General VM metrics cannot replace the service-specific events that explain remote resource access failures.
  2. Historical diagnostics can reconstruct the involved hosts beyond the currently active session list.
  3. Scaling automation is limited by plan design and available compute resources.
  4. A slow sign-in can stem from profile storage or user logon stages rather than the AVD broker.

Explanation

Correct Answer

D:

A slow sign-in can stem from profile storage or user logon stages rather than the AVD broker. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

General VM metrics cannot replace the service-specific events that explain remote resource access failures. This describes the separate situation "A team uses a generic Azure VM dashboard and assumes it covers all AVD application group connection failures" but does not justify the selected fix for the current issue. The decisive behavior is: A slow sign-in can stem from profile storage or user logon stages rather than the AVD broker.

B:

Historical diagnostics can reconstruct the involved hosts beyond the currently active session list. This describes the separate situation "An admin wants to know which session hosts actually accepted connections before a maintenance incident" but does not justify the selected fix for the current issue. The decisive behavior is: A slow sign-in can stem from profile storage or user logon stages rather than the AVD broker.

C:

Scaling automation is limited by plan design and available compute resources. This describes the separate situation "A help desk expects a scaling plan to instantly create an unlimited number of session host VMs" but does not justify the selected fix for the current issue. The decisive behavior is: A slow sign-in can stem from profile storage or user logon stages rather than the AVD broker.

Question 261

For the scenario "A line-of-business app needs a machine-wide registry key and service that cannot be delivered reliably per user", a team selects "Install it in the approved base image or with a supported machine-level deployment process". Which technical principle best explains why it works?

  1. Applications with system-level dependencies often require installation before shared users sign in.
  2. App attach consumes supported packaged image artifacts rather than arbitrary unpacked installer directories.
  3. Application lifecycle controls determine availability, whereas user profile preservation is a separate concern.
  4. Files On-Demand reduces unnecessary full-content downloads for eligible OneDrive files.

Explanation

Correct Answer

A:

Applications with system-level dependencies often require installation before shared users sign in. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

B:

App attach consumes supported packaged image artifacts rather than arbitrary unpacked installer directories. This describes the separate situation "An App attach test uses a standard installer folder instead of a supported packaged disk image" but does not justify the selected fix for the current issue. The decisive behavior is: Applications with system-level dependencies often require installation before shared users sign in.

C:

Application lifecycle controls determine availability, whereas user profile preservation is a separate concern. This describes the separate situation "An organization must remove an unapproved application from all new AVD sessions while preserving existing profiles" but does not justify the selected fix for the current issue. The decisive behavior is: Applications with system-level dependencies often require installation before shared users sign in.

D:

Files On-Demand reduces unnecessary full-content downloads for eligible OneDrive files. This describes the separate situation "OneDrive sync fills session host OS disks because large synchronized files are cached without capacity controls" but does not justify the selected fix for the current issue. The decisive behavior is: Applications with system-level dependencies often require installation before shared users sign in.

Question 262

The Azure Virtual Desktop team plans to "Review VNet peering, private DNS links, NSGs and routing for the endpoint path" because: Virtual desktop hosts in one VNet need to reach an Azure Files private endpoint hosted in a peered VNet. Which explanation supports the plan?

  1. Azure Virtual Desktop's reverse-connect transport requires outbound connectivity from hosts instead of exposing inbound RDP ports to the internet.
  2. A private endpoint is reachable only when name resolution and permitted routing converge on its private address.
  3. Connection transport telemetry distinguishes the user data path independently of general VM health metrics.
  4. Client-side internet path failures can prevent broker access without any failure in Azure session-host resources.

Explanation

Correct Answer

B:

A private endpoint is reachable only when name resolution and permitted routing converge on its private address. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Azure Virtual Desktop's reverse-connect transport requires outbound connectivity from hosts instead of exposing inbound RDP ports to the internet. This describes the separate situation "Users connect to the AVD broker but all session hosts fail reverse-connect control channel initialization" but does not justify the selected fix for the current issue. The decisive behavior is: A private endpoint is reachable only when name resolution and permitted routing converge on its private address.

C:

Connection transport telemetry distinguishes the user data path independently of general VM health metrics. This describes the separate situation "The team wants to identify whether AVD sessions used UDP Shortpath or TCP fallback during a fault" but does not justify the selected fix for the current issue. The decisive behavior is: A private endpoint is reachable only when name resolution and permitted routing converge on its private address.

D:

Client-side internet path failures can prevent broker access without any failure in Azure session-host resources. This describes the separate situation "A help desk sees healthy host availability but only one ISP reports failed client-to-service connections" but does not justify the selected fix for the current issue. The decisive behavior is: A private endpoint is reachable only when name resolution and permitted routing converge on its private address.

Question 263

An enterprise AVD deployment has this requirement: A new client deployment redirects local drives even though host pool properties are intended to block them. Choose the most appropriate implementation.

  1. Configure supported multimedia redirection with a compatible client and browser extension
  2. Check the client-supported camera redirection settings and OS privacy permissions
  3. Examine host pool RDP properties alongside session-host group policies and endpoint restrictions
  4. Use supported session management to disconnect or sign out the affected session after appropriate notification

Explanation

Correct Answer

C:

Examine host pool RDP properties alongside session-host group policies and endpoint restrictions. Redirection behavior can depend on multiple policy layers and client capability. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Configure supported multimedia redirection with a compatible client and browser extension. This would be appropriate for the different task-specific situation "An organization wants video playback in remote browser sessions optimized for lower CPU and bandwidth", because Multimedia redirection can shift eligible media rendering from the remote host to the local endpoint. It does not directly resolve the stated condition, which calls for Examine host pool RDP properties alongside session-host group policies and endpoint restrictions.

B:

Check the client-supported camera redirection settings and OS privacy permissions. This would be appropriate for the different task-specific situation "A remote meeting app cannot access the laptop's webcam even though the host has a working network", because Webcam use in remote sessions requires a supported client and permitted redirected device channel. It does not directly resolve the stated condition, which calls for Examine host pool RDP properties alongside session-host group policies and endpoint restrictions.

D:

Use supported session management to disconnect or sign out the affected session after appropriate notification. This would be appropriate for the different task-specific situation "Help desk staff can see an active session that is unresponsive but do not want to delete its user profile", because Session control operations are separate from persistent profile storage and application group configuration. It does not directly resolve the stated condition, which calls for Examine host pool RDP properties alongside session-host group policies and endpoint restrictions.

Question 264

A support engineer corrects "An Azure Files profile share must remain available across an availability zone failure in a supported region" by choosing "Select a compatible zone-redundant storage option after checking region and share availability". What mechanism makes that appropriate?

  1. Encryption requirements can include explicit key control beyond platform default encryption-at-rest.
  2. A private endpoint's existence does not automatically grant connectivity and name resolution from all peered networks.
  3. Azure NetApp Files volume performance depends on service-level and capacity or throughput settings.
  4. Zone-redundant storage maintains copies across zones, unlike a locally redundant single-region-zone design.

Explanation

Correct Answer

D:

Zone-redundant storage maintains copies across zones, unlike a locally redundant single-region-zone design. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Encryption requirements can include explicit key control beyond platform default encryption-at-rest. This describes the separate situation "A profile storage solution must satisfy regulated encryption-at-rest policy with customer-managed keys" but does not justify the selected fix for the current issue. The decisive behavior is: Zone-redundant storage maintains copies across zones, unlike a locally redundant single-region-zone design.

B:

A private endpoint's existence does not automatically grant connectivity and name resolution from all peered networks. This describes the separate situation "An SMB private endpoint is reachable from one VNet but inaccessible from another peered workspace VNet" but does not justify the selected fix for the current issue. The decisive behavior is: Zone-redundant storage maintains copies across zones, unlike a locally redundant single-region-zone design.

C:

Azure NetApp Files volume performance depends on service-level and capacity or throughput settings. This describes the separate situation "An Azure NetApp Files profile storage design has no allocated capacity pool or volume throughput sizing" but does not justify the selected fix for the current issue. The decisive behavior is: Zone-redundant storage maintains copies across zones, unlike a locally redundant single-region-zone design.

Question 265

Consider this AVD design: A roaming user signs in with a different UPN from the one stored in on-premises directory profile records. The action is "Review identity synchronization and UPN mapping before blaming AVD host-pool capacity". Which statement explains this choice?

  1. Inconsistent identity attributes can interfere with expected directory login and resource assignment.
  2. Removing future entitlement does not necessarily terminate an already running remote Windows session immediately.
  3. Group-based application group assignments simplify AVD resource entitlement as people join or leave teams.
  4. Conditional Access evaluation requires the targeted service sign-in to match the policy's cloud app scope.

Explanation

Correct Answer

A:

Inconsistent identity attributes can interfere with expected directory login and resource assignment. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

B:

Removing future entitlement does not necessarily terminate an already running remote Windows session immediately. This describes the separate situation "A user has been removed from a group but still retains a previously established AVD session" but does not justify the selected fix for the current issue. The decisive behavior is: Inconsistent identity attributes can interfere with expected directory login and resource assignment.

C:

Group-based application group assignments simplify AVD resource entitlement as people join or leave teams. This describes the separate situation "An IT group wants to make membership automatically determine who sees a published RemoteApp" but does not justify the selected fix for the current issue. The decisive behavior is: Inconsistent identity attributes can interfere with expected directory login and resource assignment.

D:

Conditional Access evaluation requires the targeted service sign-in to match the policy's cloud app scope. This describes the separate situation "A Conditional Access policy is configured for the wrong enterprise cloud app and never challenges AVD clients" but does not justify the selected fix for the current issue. The decisive behavior is: Inconsistent identity attributes can interfere with expected directory login and resource assignment.

Question 266

For a deployment problem, "An AVD DR plan replicates session host images but ignores identity service recovery", administrators choose "Include domain controllers, DNS, authentication and access dependencies in the recovery architecture". Why does that solve it?

  1. Session hosts are replaceable, but user profiles need independent protection and availability.
  2. A recovered VM cannot offer usable desktops if user identity and sign-in services remain unavailable.
  3. Immutable image release practices reduce long-term configuration divergence across a pooled fleet.
  4. Personal desktop recovery may require coordinating the VM, user assignment and profile container.

Explanation

Correct Answer

B:

A recovered VM cannot offer usable desktops if user identity and sign-in services remain unavailable. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Session hosts are replaceable, but user profiles need independent protection and availability. This describes the separate situation "An organization relies on locally stored user profiles when replacing pooled session hosts during disaster recovery" but does not justify the selected fix for the current issue. The decisive behavior is: A recovered VM cannot offer usable desktops if user identity and sign-in services remain unavailable.

C:

Immutable image release practices reduce long-term configuration divergence across a pooled fleet. This describes the separate situation "Session hosts are patched independently and their application versions drift away from the approved golden image" but does not justify the selected fix for the current issue. The decisive behavior is: A recovered VM cannot offer usable desktops if user identity and sign-in services remain unavailable.

D:

Personal desktop recovery may require coordinating the VM, user assignment and profile container. This describes the separate situation "An organization needs to restore deleted personal desktops while keeping user profile data from separate storage" but does not justify the selected fix for the current issue. The decisive behavior is: A recovered VM cannot offer usable desktops if user identity and sign-in services remain unavailable.

Question 267

A support ticket states: A user expects a remote session to span three monitors but only one remote screen is presented. What is the most targeted remediation?

  1. Associate authorized application groups with the workspace and verify assignments and feed refresh
  2. Review host pool load balancing and session caps to distribute connections appropriately
  3. Configure supported multiple-display settings in the remote client and host pool RDP properties
  4. Confirm their application group assignments, workspace association and feed refresh

Explanation

Correct Answer

C:

Configure supported multiple-display settings in the remote client and host pool RDP properties. Multi-monitor usage requires compatible endpoint displays and allowed RDP display behavior. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Associate authorized application groups with the workspace and verify assignments and feed refresh. This would be appropriate for the different task-specific situation "The business requires users to see a curated set of resources after signing in to Windows App", because AVD workspaces are the discovery grouping for users' published desktops and RemoteApps. It does not directly resolve the stated condition, which calls for Configure supported multiple-display settings in the remote client and host pool RDP properties.

B:

Review host pool load balancing and session caps to distribute connections appropriately. This would be appropriate for the different task-specific situation "A pooled desktop host's maximum session limit causes users to wait although spare CPU exists on other hosts", because Placement settings can prevent optimal use of available pooled compute capacity. It does not directly resolve the stated condition, which calls for Configure supported multiple-display settings in the remote client and host pool RDP properties.

D:

Confirm their application group assignments, workspace association and feed refresh. This would be appropriate for the different task-specific situation "A user connects successfully but their published resources never appear in the client feed", because Resource discovery reflects workspace entitlements separately from the ability to authenticate. It does not directly resolve the stated condition, which calls for Configure supported multiple-display settings in the remote client and host pool RDP properties.

Question 268

The approved remediation for "Operators see intermittent SMB authentication failures after Kerberos encryption policies are hardened" is "Verify the file service supports the required Kerberos encryption types and update configurations consistently". Which Azure or Windows behavior explains this?

  1. Zone redundancy protects a zonal failure but does not alone provide recovery from a region-wide outage.
  2. Azure Files identity-based SMB authorization combines share-level permission checks with file and folder ACLs.
  3. An SMB connection will not use the private endpoint until DNS resolves the service name to its private IP.
  4. A Kerberos encryption mismatch between clients and SMB storage can prevent profile-container access.

Explanation

Correct Answer

D:

A Kerberos encryption mismatch between clients and SMB storage can prevent profile-container access. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Zone redundancy protects a zonal failure but does not alone provide recovery from a region-wide outage. This describes the separate situation "An organization wants its profile storage to tolerate a full Azure region outage" but does not justify the selected fix for the current issue. The decisive behavior is: A Kerberos encryption mismatch between clients and SMB storage can prevent profile-container access.

B:

Azure Files identity-based SMB authorization combines share-level permission checks with file and folder ACLs. This describes the separate situation "Users have Azure Files share-level RBAC but still get access denied creating their FSLogix container folder" but does not justify the selected fix for the current issue. The decisive behavior is: A Kerberos encryption mismatch between clients and SMB storage can prevent profile-container access.

C:

An SMB connection will not use the private endpoint until DNS resolves the service name to its private IP. This describes the separate situation "After implementing a private endpoint, session hosts still resolve the file storage account to public IP addresses" but does not justify the selected fix for the current issue. The decisive behavior is: A Kerberos encryption mismatch between clients and SMB storage can prevent profile-container access.

Question 269

An architect must address this AVD condition: After creating an AVD private endpoint, connection feeds resolve to public destinations on managed clients. What should the team implement?

  1. Fix the applicable private DNS zone records and client DNS resolution path for the AVD private endpoint
  2. Place or replicate profile storage close to compute where supported and measure SMB latency
  3. Upgrade supported Windows App clients and confirm version prerequisites and multipath status
  4. Evaluate supported TURN-relayed UDP RDP Shortpath and the required outbound UDP path

Explanation

Correct Answer

A:

Fix the applicable private DNS zone records and client DNS resolution path for the AVD private endpoint. Private Link requires DNS resolution to direct supported service names to private endpoint addresses. This action directly addresses the conditions in the scenario.

Incorrect Answers

B:

Place or replicate profile storage close to compute where supported and measure SMB latency. This would be appropriate for the different task-specific situation "Profile containers load slowly because session hosts traverse a high-latency WAN to their file shares", because FSLogix sign-in performance depends on consistent and sufficiently low-latency access to its container storage. It does not directly resolve the stated condition, which calls for Fix the applicable private DNS zone records and client DNS resolution path for the AVD private endpoint.

C:

Upgrade supported Windows App clients and confirm version prerequisites and multipath status. This would be appropriate for the different task-specific situation "Windows App clients running obsolete builds do not display the expected RDP Multipath transport options", because RDP Multipath feature availability depends on supported client platforms and minimum Windows App versions. It does not directly resolve the stated condition, which calls for Fix the applicable private DNS zone records and client DNS resolution path for the AVD private endpoint.

D:

Evaluate supported TURN-relayed UDP RDP Shortpath and the required outbound UDP path. This would be appropriate for the different task-specific situation "Employees behind symmetric NAT cannot obtain a direct STUN path and experience high latency on TCP sessions", because TURN can relay supported UDP RDP transport when direct peer-to-peer STUN connectivity cannot be established. It does not directly resolve the stated condition, which calls for Fix the applicable private DNS zone records and client DNS resolution path for the AVD private endpoint.

Question 270

An administrator needs to correct the following: A multinational firm needs separate chargeback and quota controls for regional desktop environments. Which action is most relevant?

  1. Validate each proposed user's AVD access licensing and supported entitlement before rollout
  2. Plan subscription boundaries using governance, quota, billing and operational requirements
  3. Test workload isolation, sizing and optimized application delivery before changing the entire assignment model
  4. Pilot realistic application sessions and adjust VM memory or host count based on monitoring

Explanation

Correct Answer

B:

Plan subscription boundaries using governance, quota, billing and operational requirements. Subscription design influences available quotas and delegated administration beyond host pool configuration. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Validate each proposed user's AVD access licensing and supported entitlement before rollout. This would be appropriate for the different task-specific situation "Contractors need AVD desktops but their identity and Microsoft license eligibility are unclear", because Remote access rights depend on the chosen AVD operating system, user population and licensing model. It does not directly resolve the stated condition, which calls for Plan subscription boundaries using governance, quota, billing and operational requirements.

C:

Test workload isolation, sizing and optimized application delivery before changing the entire assignment model. This would be appropriate for the different task-specific situation "A planning team proposes replacing all pooled desktops with personal VMs after noticing one application's high CPU use", because A single resource-intensive app does not by itself prove every user needs dedicated desktop infrastructure. It does not directly resolve the stated condition, which calls for Plan subscription boundaries using governance, quota, billing and operational requirements.

D:

Pilot realistic application sessions and adjust VM memory or host count based on monitoring. This would be appropriate for the different task-specific situation "An enterprise chooses a very small VM type for 15 Office users without measuring memory pressure", because Available memory and application working sets bound stable multi-session density. It does not directly resolve the stated condition, which calls for Plan subscription boundaries using governance, quota, billing and operational requirements.

Configuring and Operating Microsoft Azure Virtual Desktop (AZ-140) Practice Tests

Purchase Individually

  • Premium File

    372 Questions & Answers
    Last Update: Oct 25, 2026

    $76.99
    $69.99
  • Training Course

    79 Lectures

    $43.99
    $39.99
  • Study Guide

    430 Pages

    $43.99
    $39.99

SPECIAL OFFER: GET 10% OFF
This is ONE TIME OFFER

You save
10%

Enter Your Email Address to Receive Your 10% Off Discount Code

SPECIAL OFFER: GET 10% OFF

You save
10%

Use Discount Code:

A confirmation link was sent to your e-mail.

Please check your mailbox for a message from support@examlabs.com and follow the directions.

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your email address below to get started with our interactive software demo of your free trial.

  • Realistic exam simulation and exam editor with preview functions
  • Whole exam in a single file with several different question types
  • Customizable exam-taking mode & detailed score reports