Pass Microsoft Azure AZ-140 Exam in First Attempt Easily
Real Microsoft Azure AZ-140 Exam Questions, Accurate & Verified Answers As Experienced in the Actual Test!

Verified by experts
3 products

You save $69.98

AZ-140 Premium Bundle

  • Premium File 372 Questions & Answers
  • Last Update: Oct 25, 2026
  • Training Course 79 Lectures
  • Study Guide 430 Pages
$79.99 $149.97

Purchase Individually

  • Premium File

    372 Questions & Answers
    Last Update: Oct 25, 2026

    $76.99
    $69.99
  • Training Course

    79 Lectures

    $43.99
    $39.99
  • Study Guide

    430 Pages

    $43.99
    $39.99

Configuring and Operating Microsoft Azure Virtual Desktop AZ-140 Practice Test 37

Question 360

An administrator needs to correct the following: User density drops sharply when Teams video meetings begin on a busy pooled host. Which action is most relevant?

  1. Use separate host pools and resource governance boundaries where different controls are required
  2. Plan workspace and application group assignments so users discover intended resources
  3. Validate Windows Server licensing and required Remote Desktop Services CAL eligibility
  4. Profile multimedia redirection effectiveness and VM CPU or memory needs during representative collaboration workloads

Explanation

Correct Answer

D:

Profile multimedia redirection effectiveness and VM CPU or memory needs during representative collaboration workloads. Real-time collaboration behavior can materially change session-host user density and performance. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Use separate host pools and resource governance boundaries where different controls are required. This would be appropriate for the different task-specific situation "An organization needs different security policy scope for high-risk developers and ordinary staff", because Pool separation supports divergent VM baseline, app and access-policy requirements. It does not directly resolve the stated condition, which calls for Profile multimedia redirection effectiveness and VM CPU or memory needs during representative collaboration workloads.

B:

Plan workspace and application group assignments so users discover intended resources. This would be appropriate for the different task-specific situation "Users need one published workspace containing separate desktop and application resources", because Workspaces aggregate the AVD application groups presented to authorized users. It does not directly resolve the stated condition, which calls for Profile multimedia redirection effectiveness and VM CPU or memory needs during representative collaboration workloads.

C:

Validate Windows Server licensing and required Remote Desktop Services CAL eligibility. This would be appropriate for the different task-specific situation "An enterprise plans Windows Server session hosts and assumes its Windows client subscription covers all RDS access", because Windows Server remote desktop access licensing differs from licensing of supported Windows client multi-session desktops. It does not directly resolve the stated condition, which calls for Profile multimedia redirection effectiveness and VM CPU or memory needs during representative collaboration workloads.

Question 361

For the scenario "An AVD pooled host pool is set to depth-first but administrators expect new sessions spread equally", a team selects "Switch to breadth-first load balancing if even distribution is the desired operation". Which technical principle best explains why it works?

  1. Breadth-first and depth-first place sessions differently across available pooled hosts.
  2. Successful feed discovery does not guarantee any eligible healthy host can accept a new session.
  3. Desktop and RemoteApp application groups represent different resource presentation and assignment models.
  4. Start VM on Connect permits a supported AVD connection attempt to initiate a deallocated session host VM.

Explanation

Correct Answer

A:

Breadth-first and depth-first place sessions differently across available pooled hosts. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

B:

Successful feed discovery does not guarantee any eligible healthy host can accept a new session. This describes the separate situation "Users see a desktop resource but receive a no-resources-available message when opening it" but does not justify the selected fix for the current issue. The decisive behavior is: Breadth-first and depth-first place sessions differently across available pooled hosts.

C:

Desktop and RemoteApp application groups represent different resource presentation and assignment models. This describes the separate situation "A host-pool administrator tries to place desktop and RemoteApp entitlements in incompatible application group arrangements" but does not justify the selected fix for the current issue. The decisive behavior is: Breadth-first and depth-first place sessions differently across available pooled hosts.

D:

Start VM on Connect permits a supported AVD connection attempt to initiate a deallocated session host VM. This describes the separate situation "The IT team wants to turn on a powered-off personal VM only when its assigned user connects" but does not justify the selected fix for the current issue. The decisive behavior is: Breadth-first and depth-first place sessions differently across available pooled hosts.

Question 362

The Azure Virtual Desktop team plans to "Set suitable disconnect and idle session timeout policies and test their effects" because: A user disconnects and leaves an idle session consuming capacity for many hours. Which explanation supports the plan?

  1. Resource discovery reflects workspace entitlements separately from the ability to authenticate.
  2. Remote session timeout policies can terminate abandoned sessions to free pooled capacity.
  3. Multi-monitor usage requires compatible endpoint displays and allowed RDP display behavior.
  4. Session control operations are separate from persistent profile storage and application group configuration.

Explanation

Correct Answer

B:

Remote session timeout policies can terminate abandoned sessions to free pooled capacity. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Resource discovery reflects workspace entitlements separately from the ability to authenticate. This describes the separate situation "A user connects successfully but their published resources never appear in the client feed" but does not justify the selected fix for the current issue. The decisive behavior is: Remote session timeout policies can terminate abandoned sessions to free pooled capacity.

C:

Multi-monitor usage requires compatible endpoint displays and allowed RDP display behavior. This describes the separate situation "A user expects a remote session to span three monitors but only one remote screen is presented" but does not justify the selected fix for the current issue. The decisive behavior is: Remote session timeout policies can terminate abandoned sessions to free pooled capacity.

D:

Session control operations are separate from persistent profile storage and application group configuration. This describes the separate situation "Help desk staff can see an active session that is unresponsive but do not want to delete its user profile" but does not justify the selected fix for the current issue. The decisive behavior is: Remote session timeout policies can terminate abandoned sessions to free pooled capacity.

Question 363

An AZ-140 reviewer recommends "Create the supported package image format for the application and host OS" for the issue "An App attach test uses a standard installer folder instead of a supported packaged disk image". Which underlying behavior is decisive?

  1. Application lifecycle controls determine availability, whereas user profile preservation is a separate concern.
  2. Central browser policies enforce common security and user experience settings across sessions.
  3. App attach consumes supported packaged image artifacts rather than arbitrary unpacked installer directories.
  4. RemoteApp launching depends on finding the requested application at the expected host location.

Explanation

Correct Answer

C:

App attach consumes supported packaged image artifacts rather than arbitrary unpacked installer directories. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Application lifecycle controls determine availability, whereas user profile preservation is a separate concern. This describes the separate situation "An organization must remove an unapproved application from all new AVD sessions while preserving existing profiles" but does not justify the selected fix for the current issue. The decisive behavior is: App attach consumes supported packaged image artifacts rather than arbitrary unpacked installer directories.

B:

Central browser policies enforce common security and user experience settings across sessions. This describes the separate situation "An enterprise needs a consistent secure Microsoft Edge configuration across every AVD pooled host" but does not justify the selected fix for the current issue. The decisive behavior is: App attach consumes supported packaged image artifacts rather than arbitrary unpacked installer directories.

D:

RemoteApp launching depends on finding the requested application at the expected host location. This describes the separate situation "A custom application path is entered incorrectly and RemoteApp launches fail with a missing executable" but does not justify the selected fix for the current issue. The decisive behavior is: App attach consumes supported packaged image artifacts rather than arbitrary unpacked installer directories.

Question 364

The operations team reports the following symptom: A new AVD admin is made subscription Contributor but still cannot manage directory group membership. Which action should be taken first?

  1. Test domain controller DNS discovery and authentication ports for the session-host network
  2. Correct Windows user-rights assignments and the applied domain policy for authorized AVD users
  3. Plan managed domain network reachability and DNS settings for the intended session-host VNet
  4. Grant the relevant Microsoft Entra directory role separately from Azure resource management permissions

Explanation

Correct Answer

D:

Grant the relevant Microsoft Entra directory role separately from Azure resource management permissions. Azure RBAC and Microsoft Entra directory administration are separate permission systems. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Test domain controller DNS discovery and authentication ports for the session-host network. This would be appropriate for the different task-specific situation "A hybrid identity deployment has users in Entra but on-premises Kerberos ticket requests fail through the VPN", because AD DS authentication to domain-joined session hosts requires reliable domain controller access. It does not directly resolve the stated condition, which calls for Grant the relevant Microsoft Entra directory role separately from Azure resource management permissions.

B:

Correct Windows user-rights assignments and the applied domain policy for authorized AVD users. This would be appropriate for the different task-specific situation "A workstation group applies a GPO that denies remote interactive logon to the very users assigned to AVD", because Application group entitlement cannot override a host policy that explicitly denies the requested logon type. It does not directly resolve the stated condition, which calls for Grant the relevant Microsoft Entra directory role separately from Azure resource management permissions.

C:

Plan managed domain network reachability and DNS settings for the intended session-host VNet. This would be appropriate for the different task-specific situation "An Entra Domain Services deployment is proposed without confirming its managed domain DNS and network requirements", because Managed domain authentication depends on the session hosts locating Entra Domain Services controllers. It does not directly resolve the stated condition, which calls for Grant the relevant Microsoft Entra directory role separately from Azure resource management permissions.

Question 365

Consider this AVD design: Azure Policy audit shows AVD session-host disks without required encryption configuration. The action is "Apply a supported disk encryption approach and audit compliance against the policy". Which statement explains this choice?

  1. Storage encryption controls protect data at rest independently of access-control lists.
  2. Private network placement does not eliminate host-level attack and malicious execution risks.
  3. Trusted Launch adds protections against selected boot-level and platform integrity attacks.
  4. EDR findings support controlled endpoint investigation and containment of suspicious behavior.

Explanation

Correct Answer

A:

Storage encryption controls protect data at rest independently of access-control lists. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

B:

Private network placement does not eliminate host-level attack and malicious execution risks. This describes the separate situation "A team assumes a private VNet guarantees an AVD session host cannot be compromised by malicious browser content" but does not justify the selected fix for the current issue. The decisive behavior is: Storage encryption controls protect data at rest independently of access-control lists.

C:

Trusted Launch adds protections against selected boot-level and platform integrity attacks. This describes the separate situation "A regulated desktop service requires Secure Boot and a virtual TPM for supported VM images" but does not justify the selected fix for the current issue. The decisive behavior is: Storage encryption controls protect data at rest independently of access-control lists.

D:

EDR findings support controlled endpoint investigation and containment of suspicious behavior. This describes the separate situation "Security engineers need to determine whether malicious user processes are performing credential theft on a shared host" but does not justify the selected fix for the current issue. The decisive behavior is: Storage encryption controls protect data at rest independently of access-control lists.

Question 366

For a deployment problem, "An administrator wants a repeatable dashboard for session hosts, sign-ins and connection reliability", administrators choose "Configure and customize Azure Virtual Desktop Insights with required diagnostic data sources". Why does that solve it?

  1. Autoscale decisions must account for existing user session state to avoid disruption.
  2. AVD Insights workbooks combine service and host telemetry into operational views.
  3. Scaling before known peak demand helps ensure ready capacity is available at sign-in.
  4. Aggregated monitoring can reduce alert fatigue without losing evidence of a shared incident.

Explanation

Correct Answer

B:

AVD Insights workbooks combine service and host telemetry into operational views. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Autoscale decisions must account for existing user session state to avoid disruption. This describes the separate situation "A scaling plan powers off hosts too aggressively while employees have disconnected but resumable sessions" but does not justify the selected fix for the current issue. The decisive behavior is: AVD Insights workbooks combine service and host telemetry into operational views.

C:

Scaling before known peak demand helps ensure ready capacity is available at sign-in. This describes the separate situation "A host pool shows insufficient available session capacity during a predictable daily spike" but does not justify the selected fix for the current issue. The decisive behavior is: AVD Insights workbooks combine service and host telemetry into operational views.

D:

Aggregated monitoring can reduce alert fatigue without losing evidence of a shared incident. This describes the separate situation "The operations team receives hundreds of identical AVD sign-in alerts during one regional network fault" but does not justify the selected fix for the current issue. The decisive behavior is: AVD Insights workbooks combine service and host telemetry into operational views.

Question 367

A platform team addresses "A pooled host receives far more simultaneous users than planned because its session cap is too high" with "Set the host pool maximum session limit based on validated user-density testing". Which technical detail justifies the response?

  1. Desktop and RemoteApp application groups represent different resource presentation and assignment models.
  2. Azure Resource Manager write operations require appropriate role permissions independently of session-host OS rights.
  3. Pooled host placement respects configured session limits and load-balancing behavior.
  4. Every session host NIC requires an address from its assigned Azure virtual network subnet.

Explanation

Correct Answer

C:

Pooled host placement respects configured session limits and load-balancing behavior. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Desktop and RemoteApp application groups represent different resource presentation and assignment models. This describes the separate situation "A host-pool administrator tries to place desktop and RemoteApp entitlements in incompatible application group arrangements" but does not justify the selected fix for the current issue. The decisive behavior is: Pooled host placement respects configured session limits and load-balancing behavior.

B:

Azure Resource Manager write operations require appropriate role permissions independently of session-host OS rights. This describes the separate situation "An automation identity can read host pools but gets AuthorizationFailed when updating configuration" but does not justify the selected fix for the current issue. The decisive behavior is: Pooled host placement respects configured session limits and load-balancing behavior.

D:

Every session host NIC requires an address from its assigned Azure virtual network subnet. This describes the separate situation "A deployment chooses a subnet with no remaining IP addresses and newly provisioned session hosts fail to start" but does not justify the selected fix for the current issue. The decisive behavior is: Pooled host placement respects configured session limits and load-balancing behavior.

Question 368

During an Azure Virtual Desktop migration, this problem appears: An organization wants to restrict all AVD logons to managed compliant devices. Which solution fits?

  1. Identify and scope the policy to the correct Azure Virtual Desktop application identifiers
  2. Correct time synchronization, DNS and identity service connectivity before repeating the join
  3. Select a supported Azure Files identity approach such as Microsoft Entra Kerberos and validate all prerequisites
  4. Combine applicable Conditional Access device compliance controls with supported client sign-ins

Explanation

Correct Answer

D:

Combine applicable Conditional Access device compliance controls with supported client sign-ins. Conditional Access can require device compliance signals before granting access to protected cloud applications. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Identify and scope the policy to the correct Azure Virtual Desktop application identifiers. This would be appropriate for the different task-specific situation "A Conditional Access policy is configured for the wrong enterprise cloud app and never challenges AVD clients", because Conditional Access evaluation requires the targeted service sign-in to match the policy's cloud app scope. It does not directly resolve the stated condition, which calls for Combine applicable Conditional Access device compliance controls with supported client sign-ins.

B:

Correct time synchronization, DNS and identity service connectivity before repeating the join. This would be appropriate for the different task-specific situation "A newly joined session host has device join errors caused by time skew and unreachable identity endpoints", because Modern identity sign-in and device registration rely on reachable endpoints and valid authentication timing. It does not directly resolve the stated condition, which calls for Combine applicable Conditional Access device compliance controls with supported client sign-ins.

C:

Select a supported Azure Files identity approach such as Microsoft Entra Kerberos and validate all prerequisites. This would be appropriate for the different task-specific situation "A cloud-only Entra user needs to reach a domain-dependent SMB profile share with unsupported identity configuration", because FSLogix profile storage authentication must be compatible with the host's chosen join and user identity model. It does not directly resolve the stated condition, which calls for Combine applicable Conditional Access device compliance controls with supported client sign-ins.

Question 369

A change record states "Review domain DNS reachability, join credentials and domain-join extension logs before rerunning" after observing "A deployment creates a session host image but the VM extension reports a failure to join the AD DS domain". What is the key supporting principle?

  1. Domain-joined session hosts require the VM to contact and authenticate with suitable domain services.
  2. Windows client session-host license metadata must match the supported licensing and operating-system arrangement.
  3. A session host stays unavailable for new placements until its drain state is removed.
  4. Desktop and RemoteApp application groups represent different resource presentation and assignment models.

Explanation

Correct Answer

A:

Domain-joined session hosts require the VM to contact and authenticate with suitable domain services. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

B:

Windows client session-host license metadata must match the supported licensing and operating-system arrangement. This describes the separate situation "A multisession VM has the right operating system but the team never configured the session host's Azure licensing property" but does not justify the selected fix for the current issue. The decisive behavior is: Domain-joined session hosts require the VM to contact and authenticate with suitable domain services.

C:

A session host stays unavailable for new placements until its drain state is removed. This describes the separate situation "A host in drain mode remains excluded from fresh connections after patch maintenance finishes" but does not justify the selected fix for the current issue. The decisive behavior is: Domain-joined session hosts require the VM to contact and authenticate with suitable domain services.

D:

Desktop and RemoteApp application groups represent different resource presentation and assignment models. This describes the separate situation "A host-pool administrator tries to place desktop and RemoteApp entitlements in incompatible application group arrangements" but does not justify the selected fix for the current issue. The decisive behavior is: Domain-joined session hosts require the VM to contact and authenticate with suitable domain services.

Question 370

An administrator needs to correct the following: Help desk staff see high CPU on one session host while others remain lightly loaded. Which action is most relevant?

  1. Choose one supported host power-management automation approach and disable conflicting schedules
  2. Analyze AVD session distribution and adjust load balancing or session limits as warranted
  3. Use session counts and host availability trends to refine scaling plan ramp-up times
  4. Use Azure Monitor Agent and an appropriate data collection rule for guest memory counters

Explanation

Correct Answer

B:

Analyze AVD session distribution and adjust load balancing or session limits as warranted. Misaligned host placement can cause hotspots despite sufficient aggregate pool capacity. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Choose one supported host power-management automation approach and disable conflicting schedules. This would be appropriate for the different task-specific situation "A team tries to run an Azure Automation shutdown script and AVD autoscale simultaneously on the same host pool", because Competing scalers can counteract one another and create unstable session-host availability. It does not directly resolve the stated condition, which calls for Analyze AVD session distribution and adjust load balancing or session limits as warranted.

C:

Use session counts and host availability trends to refine scaling plan ramp-up times. This would be appropriate for the different task-specific situation "A host pool shows insufficient available session capacity during a predictable daily spike", because Scaling before known peak demand helps ensure ready capacity is available at sign-in. It does not directly resolve the stated condition, which calls for Analyze AVD session distribution and adjust load balancing or session limits as warranted.

D:

Use Azure Monitor Agent and an appropriate data collection rule for guest memory counters. This would be appropriate for the different task-specific situation "One host experiences memory exhaustion but Azure Monitor only shows platform CPU utilization", because Guest OS metrics require supported agent-based collection beyond default platform metrics. It does not directly resolve the stated condition, which calls for Analyze AVD session distribution and adjust load balancing or session limits as warranted.

Configuring and Operating Microsoft Azure Virtual Desktop (AZ-140) Practice Tests

Purchase Individually

  • Premium File

    372 Questions & Answers
    Last Update: Oct 25, 2026

    $76.99
    $69.99
  • Training Course

    79 Lectures

    $43.99
    $39.99
  • Study Guide

    430 Pages

    $43.99
    $39.99

SPECIAL OFFER: GET 10% OFF
This is ONE TIME OFFER

You save
10%

Enter Your Email Address to Receive Your 10% Off Discount Code

SPECIAL OFFER: GET 10% OFF

You save
10%

Use Discount Code:

A confirmation link was sent to your e-mail.

Please check your mailbox for a message from support@examlabs.com and follow the directions.

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your email address below to get started with our interactive software demo of your free trial.

  • Realistic exam simulation and exam editor with preview functions
  • Whole exam in a single file with several different question types
  • Customizable exam-taking mode & detailed score reports