Pass Microsoft Azure AZ-140 Exam in First Attempt Easily
Real Microsoft Azure AZ-140 Exam Questions, Accurate & Verified Answers As Experienced in the Actual Test!

Verified by experts
3 products

You save $69.98

AZ-140 Premium Bundle

  • Premium File 372 Questions & Answers
  • Last Update: Oct 25, 2026
  • Training Course 79 Lectures
  • Study Guide 430 Pages
$79.99 $149.97

Purchase Individually

  • Premium File

    372 Questions & Answers
    Last Update: Oct 25, 2026

    $76.99
    $69.99
  • Training Course

    79 Lectures

    $43.99
    $39.99
  • Study Guide

    430 Pages

    $43.99
    $39.99

Configuring and Operating Microsoft Azure Virtual Desktop AZ-140 Practice Test 35

Question 340

The team adopts "Configure breadth-first load balancing in the pooled host pool" for this AVD requirement: "A finance department prioritizes even interactive responsiveness by distributing users across healthy hosts". Which explanation is correct?

  1. A single resource-intensive app does not by itself prove every user needs dedicated desktop infrastructure.
  2. AVD control-plane resource location and virtual machine compute location are distinct design choices.
  3. Azure VM SKU and GPU availability varies by region and subscription quota.
  4. Breadth-first spreads new sessions across available hosts to balance user counts instead of packing hosts tightly.

Explanation

Correct Answer

D:

Breadth-first spreads new sessions across available hosts to balance user counts instead of packing hosts tightly. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

A single resource-intensive app does not by itself prove every user needs dedicated desktop infrastructure. This describes the separate situation "A planning team proposes replacing all pooled desktops with personal VMs after noticing one application's high CPU use" but does not justify the selected fix for the current issue. The decisive behavior is: Breadth-first spreads new sessions across available hosts to balance user counts instead of packing hosts tightly.

B:

AVD control-plane resource location and virtual machine compute location are distinct design choices. This describes the separate situation "Administrators confuse the host pool's Azure region with the physical region of each session host VM" but does not justify the selected fix for the current issue. The decisive behavior is: Breadth-first spreads new sessions across available hosts to balance user counts instead of packing hosts tightly.

C:

Azure VM SKU and GPU availability varies by region and subscription quota. This describes the separate situation "A customer requires GPU-intensive design apps but cannot find its selected GPU VM family in the planned region" but does not justify the selected fix for the current issue. The decisive behavior is: Breadth-first spreads new sessions across available hosts to balance user counts instead of packing hosts tightly.

Question 341

For the scenario "Ransomware routinely tries to modify protected user document folders within remote desktops", a team selects "Configure Controlled Folder Access with suitable protected folder and application allow rules". Which technical principle best explains why it works?

  1. Controlled Folder Access restricts untrusted processes from modifying protected data locations.
  2. Strong identity and device conditions reduce the risk of unauthorized high-impact management activity.
  3. Local administrator privileges on shared hosts increase potential cross-user and system compromise.
  4. Application control policies can restrict execution of software not approved by the organization.

Explanation

Correct Answer

A:

Controlled Folder Access restricts untrusted processes from modifying protected data locations. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

B:

Strong identity and device conditions reduce the risk of unauthorized high-impact management activity. This describes the separate situation "Privileged operators connect from untrusted devices to production session hosts without strong authentication controls" but does not justify the selected fix for the current issue. The decisive behavior is: Controlled Folder Access restricts untrusted processes from modifying protected data locations.

C:

Local administrator privileges on shared hosts increase potential cross-user and system compromise. This describes the separate situation "Users have local administrator rights on pooled session hosts solely to install a browser extension" but does not justify the selected fix for the current issue. The decisive behavior is: Controlled Folder Access restricts untrusted processes from modifying protected data locations.

D:

Application control policies can restrict execution of software not approved by the organization. This describes the separate situation "An engineering group wants only approved executable programs to launch in a high-security pooled desktop" but does not justify the selected fix for the current issue. The decisive behavior is: Controlled Folder Access restricts untrusted processes from modifying protected data locations.

Question 342

The Azure Virtual Desktop team plans to "Install or configure appropriate code-signing certificate trust before deploying the package" because: An application package is signed with a certificate that the session hosts do not trust. Which explanation supports the plan?

  1. Files On-Demand reduces unnecessary full-content downloads for eligible OneDrive files.
  2. Windows application package trust checks can block installation or registration of untrusted signed packages.
  3. Application activation has specific shared-host prerequisites beyond simply copying installed binaries.
  4. Teams real-time media and remote device redirection have separate compatibility and policy requirements.

Explanation

Correct Answer

B:

Windows application package trust checks can block installation or registration of untrusted signed packages. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Files On-Demand reduces unnecessary full-content downloads for eligible OneDrive files. This describes the separate situation "OneDrive sync fills session host OS disks because large synchronized files are cached without capacity controls" but does not justify the selected fix for the current issue. The decisive behavior is: Windows application package trust checks can block installation or registration of untrusted signed packages.

C:

Application activation has specific shared-host prerequisites beyond simply copying installed binaries. This describes the separate situation "An AVD host's Microsoft 365 Apps are installed but users receive licensing errors even with valid subscriptions" but does not justify the selected fix for the current issue. The decisive behavior is: Windows application package trust checks can block installation or registration of untrusted signed packages.

D:

Teams real-time media and remote device redirection have separate compatibility and policy requirements. This describes the separate situation "Microsoft Teams calls work, but user cameras do not appear in sessions after a client policy change" but does not justify the selected fix for the current issue. The decisive behavior is: Windows application package trust checks can block installation or registration of untrusted signed packages.

Question 343

An enterprise AVD deployment has this requirement: An organization needs to restore deleted personal desktops while keeping user profile data from separate storage. Choose the most appropriate implementation.

  1. Stage updates through maintenance rings and preserve enough healthy capacity for active sessions
  2. Stop rollout, isolate the bad image version and restore hosts from a known-good release
  3. Restore required VM disks or backups and reconnect validated profile storage before reassignment
  4. Write and rehearse a complete failover runbook covering host pools, clients, DNS and user access

Explanation

Correct Answer

C:

Restore required VM disks or backups and reconnect validated profile storage before reassignment. Personal desktop recovery may require coordinating the VM, user assignment and profile container. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Stage updates through maintenance rings and preserve enough healthy capacity for active sessions. This would be appropriate for the different task-specific situation "An administrator applies a cumulative update to every session host simultaneously and all users are disconnected", because Rolling updates retain service availability when a subset of hosts is undergoing maintenance. It does not directly resolve the stated condition, which calls for Restore required VM disks or backups and reconnect validated profile storage before reassignment.

B:

Stop rollout, isolate the bad image version and restore hosts from a known-good release. This would be appropriate for the different task-specific situation "A new AVD image release changes an agent component and only a subset of hosts can reconnect", because Controlled rollback minimizes user disruption while the incompatible image change is investigated. It does not directly resolve the stated condition, which calls for Restore required VM disks or backups and reconnect validated profile storage before reassignment.

D:

Write and rehearse a complete failover runbook covering host pools, clients, DNS and user access. This would be appropriate for the different task-specific situation "The disaster recovery documentation contains a list of backup services but no tested routing or client reconnect process", because End-to-end AVD continuity depends on restoring usable sessions, not merely confirming backups exist. It does not directly resolve the stated condition, which calls for Restore required VM disks or backups and reconnect validated profile storage before reassignment.

Question 344

A support engineer corrects "A company needs Windows 11 multi-session desktops for eligible Microsoft 365 users" by choosing "Choose supported Windows 11 Enterprise multi-session images in a pooled AVD deployment". What mechanism makes that appropriate?

  1. Subscription design influences available quotas and delegated administration beyond host pool configuration.
  2. Pool separation supports divergent VM baseline, app and access-policy requirements.
  3. Logon storms create short-lived authentication, disk and CPU spikes that sustained averages can hide.
  4. Windows Enterprise multi-session is designed for shared Azure Virtual Desktop session-host experiences.

Explanation

Correct Answer

D:

Windows Enterprise multi-session is designed for shared Azure Virtual Desktop session-host experiences. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Subscription design influences available quotas and delegated administration beyond host pool configuration. This describes the separate situation "A multinational firm needs separate chargeback and quota controls for regional desktop environments" but does not justify the selected fix for the current issue. The decisive behavior is: Windows Enterprise multi-session is designed for shared Azure Virtual Desktop session-host experiences.

B:

Pool separation supports divergent VM baseline, app and access-policy requirements. This describes the separate situation "An organization needs different security policy scope for high-risk developers and ordinary staff" but does not justify the selected fix for the current issue. The decisive behavior is: Windows Enterprise multi-session is designed for shared Azure Virtual Desktop session-host experiences.

C:

Logon storms create short-lived authentication, disk and CPU spikes that sustained averages can hide. This describes the separate situation "A capacity report shows brief 200-percent login spikes before employees start their shifts" but does not justify the selected fix for the current issue. The decisive behavior is: Windows Enterprise multi-session is designed for shared Azure Virtual Desktop session-host experiences.

Question 345

While preparing session hosts, an engineer discovers: Profile containers load slowly because session hosts traverse a high-latency WAN to their file shares. Which change best meets the requirement?

  1. Place or replicate profile storage close to compute where supported and measure SMB latency
  2. Compare client path diagnostics, public endpoint reachability and ISP routing before rebuilding session hosts
  3. Review VNet peering, private DNS links, NSGs and routing for the endpoint path
  4. Correlate user session transport statistics with packet loss, jitter and WAN link congestion

Explanation

Correct Answer

A:

Place or replicate profile storage close to compute where supported and measure SMB latency. FSLogix sign-in performance depends on consistent and sufficiently low-latency access to its container storage. This action directly addresses the conditions in the scenario.

Incorrect Answers

B:

Compare client path diagnostics, public endpoint reachability and ISP routing before rebuilding session hosts. This would be appropriate for the different task-specific situation "A help desk sees healthy host availability but only one ISP reports failed client-to-service connections", because Client-side internet path failures can prevent broker access without any failure in Azure session-host resources. It does not directly resolve the stated condition, which calls for Place or replicate profile storage close to compute where supported and measure SMB latency.

C:

Review VNet peering, private DNS links, NSGs and routing for the endpoint path. This would be appropriate for the different task-specific situation "Virtual desktop hosts in one VNet need to reach an Azure Files private endpoint hosted in a peered VNet", because A private endpoint is reachable only when name resolution and permitted routing converge on its private address. It does not directly resolve the stated condition, which calls for Place or replicate profile storage close to compute where supported and measure SMB latency.

D:

Correlate user session transport statistics with packet loss, jitter and WAN link congestion. This would be appropriate for the different task-specific situation "A successful RDP connection suffers intermittent audio gaps only when UDP loss spikes", because Real-time media quality is particularly sensitive to packet loss and unstable transport timing. It does not directly resolve the stated condition, which calls for Place or replicate profile storage close to compute where supported and measure SMB latency.

Question 346

A remote desktop service needs to resolve this condition: An Azure Files profile share must remain available across an availability zone failure in a supported region. Select the best approach.

  1. Verify the file service supports the required Kerberos encryption types and update configurations consistently
  2. Select a compatible zone-redundant storage option after checking region and share availability
  3. Analyze volume service-level throughput and resize capacity or throughput settings as supported
  4. Increase the appropriate file-share quota and address per-profile growth under retention policy

Explanation

Correct Answer

B:

Select a compatible zone-redundant storage option after checking region and share availability. Zone-redundant storage maintains copies across zones, unlike a locally redundant single-region-zone design. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Verify the file service supports the required Kerberos encryption types and update configurations consistently. This would be appropriate for the different task-specific situation "Operators see intermittent SMB authentication failures after Kerberos encryption policies are hardened", because A Kerberos encryption mismatch between clients and SMB storage can prevent profile-container access. It does not directly resolve the stated condition, which calls for Select a compatible zone-redundant storage option after checking region and share availability.

C:

Analyze volume service-level throughput and resize capacity or throughput settings as supported. This would be appropriate for the different task-specific situation "An Azure NetApp Files volume experiences sustained throughput pressure during simultaneous profile logons", because ANF throughput and service-level quotas can constrain FSLogix operations under aggregate login load. It does not directly resolve the stated condition, which calls for Select a compatible zone-redundant storage option after checking region and share availability.

D:

Increase the appropriate file-share quota and address per-profile growth under retention policy. This would be appropriate for the different task-specific situation "A file share has a low quota and reaches capacity during an organization-wide sign-in event", because Share capacity ceilings can block new profile writes even when underlying storage connectivity is healthy. It does not directly resolve the stated condition, which calls for Select a compatible zone-redundant storage option after checking region and share availability.

Question 347

A platform team addresses "An accounting application should be published without giving the team a full shared Windows desktop" with "Create an AVD RemoteApp application group and add the required executable entry". Which technical detail justifies the response?

  1. Central browser policies enforce common security and user experience settings across sessions.
  2. Packaging must preserve the executable's required runtime dependencies for successful remote launch.
  3. RemoteApp groups publish individual application experiences to authorized users.
  4. Teams real-time media and remote device redirection have separate compatibility and policy requirements.

Explanation

Correct Answer

C:

RemoteApp groups publish individual application experiences to authorized users. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Central browser policies enforce common security and user experience settings across sessions. This describes the separate situation "An enterprise needs a consistent secure Microsoft Edge configuration across every AVD pooled host" but does not justify the selected fix for the current issue. The decisive behavior is: RemoteApp groups publish individual application experiences to authorized users.

B:

Packaging must preserve the executable's required runtime dependencies for successful remote launch. This describes the separate situation "A packaged application depends on a DLL that was omitted during MSIX preparation and fails to launch" but does not justify the selected fix for the current issue. The decisive behavior is: RemoteApp groups publish individual application experiences to authorized users.

D:

Teams real-time media and remote device redirection have separate compatibility and policy requirements. This describes the separate situation "Microsoft Teams calls work, but user cameras do not appear in sessions after a client policy change" but does not justify the selected fix for the current issue. The decisive behavior is: RemoteApp groups publish individual application experiences to authorized users.

Question 348

The approved remediation for "An organization must remove an unapproved application from all new AVD sessions while preserving existing profiles" is "Remove the app from the managed image or App attach entitlement and roll out a tested deployment change". Which Azure or Windows behavior explains this?

  1. Applications with system-level dependencies often require installation before shared users sign in.
  2. App attach user access is controlled through AVD app publication and group entitlement.
  3. Shared computer activation enables supported Microsoft 365 Apps licensing on shared-session environments.
  4. Application lifecycle controls determine availability, whereas user profile preservation is a separate concern.

Explanation

Correct Answer

D:

Application lifecycle controls determine availability, whereas user profile preservation is a separate concern. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Applications with system-level dependencies often require installation before shared users sign in. This describes the separate situation "A line-of-business app needs a machine-wide registry key and service that cannot be delivered reliably per user" but does not justify the selected fix for the current issue. The decisive behavior is: Application lifecycle controls determine availability, whereas user profile preservation is a separate concern.

B:

App attach user access is controlled through AVD app publication and group entitlement. This describes the separate situation "A new packaged app must be available to only one department in a large AVD host pool" but does not justify the selected fix for the current issue. The decisive behavior is: Application lifecycle controls determine availability, whereas user profile preservation is a separate concern.

C:

Shared computer activation enables supported Microsoft 365 Apps licensing on shared-session environments. This describes the separate situation "A shared Windows multi-session host prompts each Microsoft 365 Apps user to activate Office as if it were a personal machine" but does not justify the selected fix for the current issue. The decisive behavior is: Application lifecycle controls determine availability, whereas user profile preservation is a separate concern.

Question 349

An architect must address this AVD condition: An administrator creates an AVD host pool but cannot find a virtual machine to accept user sessions. What should the team implement?

  1. Provision and register compatible session host VMs to the intended host pool
  2. Use the Azure Local-supported AVD deployment integration and confirm platform and identity prerequisites
  3. Use supported Bicep or ARM templates with parameterized environment values and reviewed deployment stages
  4. Confirm the required RDS licensing model and configure valid licensing servers or entitlement as applicable

Explanation

Correct Answer

A:

Provision and register compatible session host VMs to the intended host pool. A host pool is a management container and requires registered session-host compute to run user sessions. This action directly addresses the conditions in the scenario.

Incorrect Answers

B:

Use the Azure Local-supported AVD deployment integration and confirm platform and identity prerequisites. This would be appropriate for the different task-specific situation "An Azure Local session-host deployment is planned as if its VM inventory automatically exists in Azure Compute", because Session hosts on Azure Local use supported local infrastructure with distinct provisioning details from Azure-hosted VMs. It does not directly resolve the stated condition, which calls for Provision and register compatible session host VMs to the intended host pool.

C:

Use supported Bicep or ARM templates with parameterized environment values and reviewed deployment stages. This would be appropriate for the different task-specific situation "A platform team must reproduce the same AVD host pool topology across staging and production", because Declarative Azure deployments make repeatable host-pool resource creation less dependent on portal clicks. It does not directly resolve the stated condition, which calls for Provision and register compatible session host VMs to the intended host pool.

D:

Confirm the required RDS licensing model and configure valid licensing servers or entitlement as applicable. This would be appropriate for the different task-specific situation "Windows Server session hosts are deployed for pooled desktops but the organization has not planned RDS CALs", because Windows Server-hosted remote sessions have RDS licensing obligations distinct from Windows Enterprise multi-session rights. It does not directly resolve the stated condition, which calls for Provision and register compatible session host VMs to the intended host pool.

Question 350

The team adopts "Deploy a supported Windows App client and validate subscription feed discovery" for this AVD requirement: "Employees on Windows devices are migrating from a retired Remote Desktop app to current supported access". Which explanation is correct?

  1. Session control operations are separate from persistent profile storage and application group configuration.
  2. Current Azure Virtual Desktop clients determine which remote experiences and transport features users can access.
  3. Central client deployment reduces version drift and ensures supported feature availability.
  4. Windows policy processing determines user experience settings independently of the host pool resource definition.

Explanation

Correct Answer

B:

Current Azure Virtual Desktop clients determine which remote experiences and transport features users can access. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Session control operations are separate from persistent profile storage and application group configuration. This describes the separate situation "Help desk staff can see an active session that is unresponsive but do not want to delete its user profile" but does not justify the selected fix for the current issue. The decisive behavior is: Current Azure Virtual Desktop clients determine which remote experiences and transport features users can access.

C:

Central client deployment reduces version drift and ensures supported feature availability. This describes the separate situation "A new Windows App release must reach all managed corporate laptops consistently" but does not justify the selected fix for the current issue. The decisive behavior is: Current Azure Virtual Desktop clients determine which remote experiences and transport features users can access.

D:

Windows policy processing determines user experience settings independently of the host pool resource definition. This describes the separate situation "A shared host pool has inconsistent Start menu and Windows settings because user policies differ across OUs" but does not justify the selected fix for the current issue. The decisive behavior is: Current Azure Virtual Desktop clients determine which remote experiences and transport features users can access.

Configuring and Operating Microsoft Azure Virtual Desktop (AZ-140) Practice Tests

Purchase Individually

  • Premium File

    372 Questions & Answers
    Last Update: Oct 25, 2026

    $76.99
    $69.99
  • Training Course

    79 Lectures

    $43.99
    $39.99
  • Study Guide

    430 Pages

    $43.99
    $39.99

SPECIAL OFFER: GET 10% OFF
This is ONE TIME OFFER

You save
10%

Enter Your Email Address to Receive Your 10% Off Discount Code

SPECIAL OFFER: GET 10% OFF

You save
10%

Use Discount Code:

A confirmation link was sent to your e-mail.

Please check your mailbox for a message from support@examlabs.com and follow the directions.

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your email address below to get started with our interactive software demo of your free trial.

  • Realistic exam simulation and exam editor with preview functions
  • Whole exam in a single file with several different question types
  • Customizable exam-taking mode & detailed score reports