Pass Microsoft Azure AZ-140 Exam in First Attempt Easily
Real Microsoft Azure AZ-140 Exam Questions, Accurate & Verified Answers As Experienced in the Actual Test!

Verified by experts
3 products

You save $69.98

AZ-140 Premium Bundle

  • Premium File 372 Questions & Answers
  • Last Update: Oct 25, 2026
  • Training Course 79 Lectures
  • Study Guide 430 Pages
$79.99 $149.97

Purchase Individually

  • Premium File

    372 Questions & Answers
    Last Update: Oct 25, 2026

    $76.99
    $69.99
  • Training Course

    79 Lectures

    $43.99
    $39.99
  • Study Guide

    430 Pages

    $43.99
    $39.99

Configuring and Operating Microsoft Azure Virtual Desktop AZ-140 Practice Test 39

Question 380

The team adopts "Use the Azure Local-supported AVD deployment integration and confirm platform and identity prerequisites" for this AVD requirement: "An Azure Local session-host deployment is planned as if its VM inventory automatically exists in Azure Compute". Which explanation is correct?

  1. A session host stays unavailable for new placements until its drain state is removed.
  2. A repeatable host lifecycle reduces dependence on manual changes to individual desktops.
  3. AVD service placement depends on completed host-pool registration, not simply Azure VM creation.
  4. Session hosts on Azure Local use supported local infrastructure with distinct provisioning details from Azure-hosted VMs.

Explanation

Correct Answer

D:

Session hosts on Azure Local use supported local infrastructure with distinct provisioning details from Azure-hosted VMs. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

A session host stays unavailable for new placements until its drain state is removed. This describes the separate situation "A host in drain mode remains excluded from fresh connections after patch maintenance finishes" but does not justify the selected fix for the current issue. The decisive behavior is: Session hosts on Azure Local use supported local infrastructure with distinct provisioning details from Azure-hosted VMs.

B:

A repeatable host lifecycle reduces dependence on manual changes to individual desktops. This describes the separate situation "An operations team needs to replace unhealthy hosts using a clean image rather than repair each VM in place" but does not justify the selected fix for the current issue. The decisive behavior is: Session hosts on Azure Local use supported local infrastructure with distinct provisioning details from Azure-hosted VMs.

C:

AVD service placement depends on completed host-pool registration, not simply Azure VM creation. This describes the separate situation "A PowerShell automation creates only session-host Azure VMs but never registers their AVD agent" but does not justify the selected fix for the current issue. The decisive behavior is: Session hosts on Azure Local use supported local infrastructure with distinct provisioning details from Azure-hosted VMs.

Question 381

For the scenario "FSLogix profiles need point-in-time recovery after an accidental deletion of user data", a team selects "Configure supported Azure Files share snapshots or backup and test recovery procedures". Which technical principle best explains why it works?

  1. Snapshots and backups provide recoverable versions that profile replication alone does not guarantee.
  2. Identity-based authentication allows eligible Windows SMB users to access Azure Files with domain credentials and ACLs.
  3. Proactive storage telemetry helps prevent profile load failures caused by saturation or capacity exhaustion.
  4. A private endpoint's existence does not automatically grant connectivity and name resolution from all peered networks.

Explanation

Correct Answer

A:

Snapshots and backups provide recoverable versions that profile replication alone does not guarantee. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

B:

Identity-based authentication allows eligible Windows SMB users to access Azure Files with domain credentials and ACLs. This describes the separate situation "AD DS-joined session hosts must authenticate to Azure Files with existing domain users rather than storage account keys" but does not justify the selected fix for the current issue. The decisive behavior is: Snapshots and backups provide recoverable versions that profile replication alone does not guarantee.

C:

Proactive storage telemetry helps prevent profile load failures caused by saturation or capacity exhaustion. This describes the separate situation "Storage monitoring reports increasing profile share capacity use but no historical growth alerts exist" but does not justify the selected fix for the current issue. The decisive behavior is: Snapshots and backups provide recoverable versions that profile replication alone does not guarantee.

D:

A private endpoint's existence does not automatically grant connectivity and name resolution from all peered networks. This describes the separate situation "An SMB private endpoint is reachable from one VNet but inaccessible from another peered workspace VNet" but does not justify the selected fix for the current issue. The decisive behavior is: Snapshots and backups provide recoverable versions that profile replication alone does not guarantee.

Question 382

The Azure Virtual Desktop team plans to "Provide an approved noninteractive outbound proxy path for Azure Virtual Desktop service endpoints" because: A web filtering proxy requires interactive authentication and prevents unattended AVD agent HTTPS communication. Which explanation supports the plan?

  1. Client-side internet path failures can prevent broker access without any failure in Azure session-host resources.
  2. Session-host agents require reliable machine-level service connectivity even when no user is signed in.
  3. RDP Shortpath uses UDP where possible and falls back to TCP reverse-connect when no usable UDP path is established.
  4. FSLogix sign-in performance depends on consistent and sufficiently low-latency access to its container storage.

Explanation

Correct Answer

B:

Session-host agents require reliable machine-level service connectivity even when no user is signed in. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Client-side internet path failures can prevent broker access without any failure in Azure session-host resources. This describes the separate situation "A help desk sees healthy host availability but only one ISP reports failed client-to-service connections" but does not justify the selected fix for the current issue. The decisive behavior is: Session-host agents require reliable machine-level service connectivity even when no user is signed in.

C:

RDP Shortpath uses UDP where possible and falls back to TCP reverse-connect when no usable UDP path is established. This describes the separate situation "Internet-based users connect successfully but the RDP transport stays on TCP after UDP is blocked by a perimeter firewall" but does not justify the selected fix for the current issue. The decisive behavior is: Session-host agents require reliable machine-level service connectivity even when no user is signed in.

D:

FSLogix sign-in performance depends on consistent and sufficiently low-latency access to its container storage. This describes the separate situation "Profile containers load slowly because session hosts traverse a high-latency WAN to their file shares" but does not justify the selected fix for the current issue. The decisive behavior is: Session-host agents require reliable machine-level service connectivity even when no user is signed in.

Question 383

An enterprise AVD deployment has this requirement: A host pool uses an outdated gallery image despite a newer image version being available. Choose the most appropriate implementation.

  1. Create and validate compatible images and architecture-specific VM families as needed
  2. Record OS build and installed patch level as part of every image release and compliance check
  3. Rebuild or replace session hosts through a controlled rollout referencing the desired tested version
  4. Complete and validate installation restarts before sealing or publishing the image

Explanation

Correct Answer

C:

Rebuild or replace session hosts through a controlled rollout referencing the desired tested version. Publishing a new gallery version does not automatically patch all existing session-host VMs. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Create and validate compatible images and architecture-specific VM families as needed. This would be appropriate for the different task-specific situation "An organization needs to run the same image on VM sizes with different CPU architecture capabilities", because An operating system image's architecture must match supported target VM hardware. It does not directly resolve the stated condition, which calls for Rebuild or replace session hosts through a controlled rollout referencing the desired tested version.

B:

Record OS build and installed patch level as part of every image release and compliance check. This would be appropriate for the different task-specific situation "The team builds session host images without recording which Windows cumulative updates were present", because Traceable image baselines simplify patch compliance and recovery from known OS regressions. It does not directly resolve the stated condition, which calls for Rebuild or replace session hosts through a controlled rollout referencing the desired tested version.

D:

Complete and validate installation restarts before sealing or publishing the image. This would be appropriate for the different task-specific situation "A newly captured image includes pending Windows restart actions and fails first-boot provisioning", because Unfinished servicing operations can make a reusable image unreliable during VM customization. It does not directly resolve the stated condition, which calls for Rebuild or replace session hosts through a controlled rollout referencing the desired tested version.

Question 384

The operations team reports the following symptom: An organization needs to run the same image on VM sizes with different CPU architecture capabilities. Which action should be taken first?

  1. Add the approved region to image version replication or deploy from a supported regional source
  2. Add supported shared-app and profile components to the image build before sealing it
  3. Record OS build and installed patch level as part of every image release and compliance check
  4. Create and validate compatible images and architecture-specific VM families as needed

Explanation

Correct Answer

D:

Create and validate compatible images and architecture-specific VM families as needed. An operating system image's architecture must match supported target VM hardware. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Add the approved region to image version replication or deploy from a supported regional source. This would be appropriate for the different task-specific situation "An image version is replicated to one region but the expansion host pool uses another unavailable target region", because Image availability for VM creation depends on where a gallery version is distributed. It does not directly resolve the stated condition, which calls for Create and validate compatible images and architecture-specific VM families as needed.

B:

Add supported shared-app and profile components to the image build before sealing it. This would be appropriate for the different task-specific situation "An image capture is made before required Microsoft 365 Apps and FSLogix components are installed", because Every new host inherits the software baseline present in the source image at provisioning time. It does not directly resolve the stated condition, which calls for Create and validate compatible images and architecture-specific VM families as needed.

C:

Record OS build and installed patch level as part of every image release and compliance check. This would be appropriate for the different task-specific situation "The team builds session host images without recording which Windows cumulative updates were present", because Traceable image baselines simplify patch compliance and recovery from known OS regressions. It does not directly resolve the stated condition, which calls for Create and validate compatible images and architecture-specific VM families as needed.

Question 385

While preparing session hosts, an engineer discovers: A Conditional Access policy is configured for the wrong enterprise cloud app and never challenges AVD clients. Which change best meets the requirement?

  1. Identify and scope the policy to the correct Azure Virtual Desktop application identifiers
  2. Verify applicable AVD login role assignments, user identity eligibility and session host sign-in settings
  3. Plan managed domain network reachability and DNS settings for the intended session-host VNet
  4. Join session hosts to AD DS and validate network, DNS and domain controller reachability

Explanation

Correct Answer

A:

Identify and scope the policy to the correct Azure Virtual Desktop application identifiers. Conditional Access evaluation requires the targeted service sign-in to match the policy's cloud app scope. This action directly addresses the conditions in the scenario.

Incorrect Answers

B:

Verify applicable AVD login role assignments, user identity eligibility and session host sign-in settings. This would be appropriate for the different task-specific situation "New Entra joined session hosts have correct AVD registration but users are rejected at Windows interactive sign-in", because Azure Virtual Desktop resource assignment does not automatically grant every underlying Windows login right. It does not directly resolve the stated condition, which calls for Identify and scope the policy to the correct Azure Virtual Desktop application identifiers.

C:

Plan managed domain network reachability and DNS settings for the intended session-host VNet. This would be appropriate for the different task-specific situation "An Entra Domain Services deployment is proposed without confirming its managed domain DNS and network requirements", because Managed domain authentication depends on the session hosts locating Entra Domain Services controllers. It does not directly resolve the stated condition, which calls for Identify and scope the policy to the correct Azure Virtual Desktop application identifiers.

D:

Join session hosts to AD DS and validate network, DNS and domain controller reachability. This would be appropriate for the different task-specific situation "A pooled host pool must support legacy Kerberos applications using an existing on-premises Active Directory forest", because AD DS-joined hosts can use established Kerberos and group policy infrastructure when network connectivity is available. It does not directly resolve the stated condition, which calls for Identify and scope the policy to the correct Azure Virtual Desktop application identifiers.

Question 386

For a deployment problem, "An AVD disaster plan stores every approved VM image version only in the failed primary region", administrators choose "Replicate or publish the required tested Compute Gallery image versions to a recovery region". Why does that solve it?

  1. Historical profile data recovery requires backup snapshots rather than profile roaming alone.
  2. Secondary VM provisioning depends on availability of compatible image artifacts in that region.
  3. Personal desktop recovery may require coordinating the VM, user assignment and profile container.
  4. Persistent personal VM workloads may need disk-level recovery beyond shared host image retention.

Explanation

Correct Answer

B:

Secondary VM provisioning depends on availability of compatible image artifacts in that region. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Historical profile data recovery requires backup snapshots rather than profile roaming alone. This describes the separate situation "A user accidentally deletes important data from an FSLogix profile VHD stored on Azure Files and administrators have no recovery point" but does not justify the selected fix for the current issue. The decisive behavior is: Secondary VM provisioning depends on availability of compatible image artifacts in that region.

C:

Personal desktop recovery may require coordinating the VM, user assignment and profile container. This describes the separate situation "An organization needs to restore deleted personal desktops while keeping user profile data from separate storage" but does not justify the selected fix for the current issue. The decisive behavior is: Secondary VM provisioning depends on availability of compatible image artifacts in that region.

D:

Persistent personal VM workloads may need disk-level recovery beyond shared host image retention. This describes the separate situation "A personal desktop contains local business data and the project assumes a pooled-image backup covers it" but does not justify the selected fix for the current issue. The decisive behavior is: Secondary VM provisioning depends on availability of compatible image artifacts in that region.

Question 387

A support ticket states: A pooled desktop host's maximum session limit causes users to wait although spare CPU exists on other hosts. What is the most targeted remediation?

  1. Check the client-supported camera redirection settings and OS privacy permissions
  2. Use supported session management to disconnect or sign out the affected session after appropriate notification
  3. Review host pool load balancing and session caps to distribute connections appropriately
  4. Verify compatible client versions and AVD Teams optimization components and settings

Explanation

Correct Answer

C:

Review host pool load balancing and session caps to distribute connections appropriately. Placement settings can prevent optimal use of available pooled compute capacity. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Check the client-supported camera redirection settings and OS privacy permissions. This would be appropriate for the different task-specific situation "A remote meeting app cannot access the laptop's webcam even though the host has a working network", because Webcam use in remote sessions requires a supported client and permitted redirected device channel. It does not directly resolve the stated condition, which calls for Review host pool load balancing and session caps to distribute connections appropriately.

B:

Use supported session management to disconnect or sign out the affected session after appropriate notification. This would be appropriate for the different task-specific situation "Help desk staff can see an active session that is unresponsive but do not want to delete its user profile", because Session control operations are separate from persistent profile storage and application group configuration. It does not directly resolve the stated condition, which calls for Review host pool load balancing and session caps to distribute connections appropriately.

D:

Verify compatible client versions and AVD Teams optimization components and settings. This would be appropriate for the different task-specific situation "Screen sharing through a remote desktop performs poorly because Teams media optimization is not active", because Teams multimedia optimization can offload real-time media processing to the client when all prerequisites are met. It does not directly resolve the stated condition, which calls for Review host pool load balancing and session caps to distribute connections appropriately.

Question 388

The approved remediation for "A user expects a remote session to span three monitors but only one remote screen is presented" is "Configure supported multiple-display settings in the remote client and host pool RDP properties". Which Azure or Windows behavior explains this?

  1. Device redirection may expose local client storage to remote applications unless explicitly restricted.
  2. AVD workspaces are the discovery grouping for users' published desktops and RemoteApps.
  3. Browser-based access offers supported remote resources without requiring a locally installed desktop client.
  4. Multi-monitor usage requires compatible endpoint displays and allowed RDP display behavior.

Explanation

Correct Answer

D:

Multi-monitor usage requires compatible endpoint displays and allowed RDP display behavior. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Device redirection may expose local client storage to remote applications unless explicitly restricted. This describes the separate situation "Users can see local USB storage devices from the session host despite a data-loss-prevention requirement" but does not justify the selected fix for the current issue. The decisive behavior is: Multi-monitor usage requires compatible endpoint displays and allowed RDP display behavior.

B:

AVD workspaces are the discovery grouping for users' published desktops and RemoteApps. This describes the separate situation "The business requires users to see a curated set of resources after signing in to Windows App" but does not justify the selected fix for the current issue. The decisive behavior is: Multi-monitor usage requires compatible endpoint displays and allowed RDP display behavior.

C:

Browser-based access offers supported remote resources without requiring a locally installed desktop client. This describes the separate situation "A temporary contractor cannot install local software but needs AVD access from a supported browser" but does not justify the selected fix for the current issue. The decisive behavior is: Multi-monitor usage requires compatible endpoint displays and allowed RDP display behavior.

Question 389

An architect must address this AVD condition: OneDrive sync fills session host OS disks because large synchronized files are cached without capacity controls. What should the team implement?

  1. Configure Files On-Demand and appropriate profile or storage capacity planning
  2. Remove the app from the managed image or App attach entitlement and roll out a tested deployment change
  3. Deploy it through managed browser extension policy targeting the allowed user group
  4. Check application group type and the published resource selected in the workspace

Explanation

Correct Answer

A:

Configure Files On-Demand and appropriate profile or storage capacity planning. Files On-Demand reduces unnecessary full-content downloads for eligible OneDrive files. This action directly addresses the conditions in the scenario.

Incorrect Answers

B:

Remove the app from the managed image or App attach entitlement and roll out a tested deployment change. This would be appropriate for the different task-specific situation "An organization must remove an unapproved application from all new AVD sessions while preserving existing profiles", because Application lifecycle controls determine availability, whereas user profile preservation is a separate concern. It does not directly resolve the stated condition, which calls for Configure Files On-Demand and appropriate profile or storage capacity planning.

C:

Deploy it through managed browser extension policy targeting the allowed user group. This would be appropriate for the different task-specific situation "A browser extension must be available only for a permitted business department", because Managed browser extension policies control allowed and required extensions without manual per-user installation. It does not directly resolve the stated condition, which calls for Configure Files On-Demand and appropriate profile or storage capacity planning.

D:

Check application group type and the published resource selected in the workspace. This would be appropriate for the different task-specific situation "A RemoteApp application group is configured but all users see the full desktop instead of the intended app", because Full desktop and RemoteApp experiences are represented by different AVD application group resources. It does not directly resolve the stated condition, which calls for Configure Files On-Demand and appropriate profile or storage capacity planning.

Question 390

An administrator needs to correct the following: A production host has outdated Windows security updates but no inventory of patch compliance. Which action is most relevant?

  1. Delegate approved management access through narrowly scoped Azure and Windows administrative roles
  2. Configure supported update reporting and remediation for the session-host operating system
  3. Layer endpoint security, patching, application control and least privilege on top of network segmentation
  4. Include supported onboarding and validation in the session-host image or deployment lifecycle

Explanation

Correct Answer

B:

Configure supported update reporting and remediation for the session-host operating system. Security baselines require visibility into patch status and timely correction of missing updates. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Delegate approved management access through narrowly scoped Azure and Windows administrative roles. This would be appropriate for the different task-specific situation "An administrator needs to troubleshoot a live host's vulnerability without giving broad local admin privileges to all help desk staff", because Least-privilege role separation limits the number of principals able to modify session-host configuration. It does not directly resolve the stated condition, which calls for Configure supported update reporting and remediation for the session-host operating system.

C:

Layer endpoint security, patching, application control and least privilege on top of network segmentation. This would be appropriate for the different task-specific situation "A team assumes a private VNet guarantees an AVD session host cannot be compromised by malicious browser content", because Private network placement does not eliminate host-level attack and malicious execution risks. It does not directly resolve the stated condition, which calls for Configure supported update reporting and remediation for the session-host operating system.

D:

Include supported onboarding and validation in the session-host image or deployment lifecycle. This would be appropriate for the different task-specific situation "One group of image versions ships without Defender for Endpoint because the agent was added manually after provisioning", because A repeatable endpoint security baseline reduces gaps created by manual per-VM setup. It does not directly resolve the stated condition, which calls for Configure supported update reporting and remediation for the session-host operating system.

Configuring and Operating Microsoft Azure Virtual Desktop (AZ-140) Practice Tests

Purchase Individually

  • Premium File

    372 Questions & Answers
    Last Update: Oct 25, 2026

    $76.99
    $69.99
  • Training Course

    79 Lectures

    $43.99
    $39.99
  • Study Guide

    430 Pages

    $43.99
    $39.99

SPECIAL OFFER: GET 10% OFF
This is ONE TIME OFFER

You save
10%

Enter Your Email Address to Receive Your 10% Off Discount Code

SPECIAL OFFER: GET 10% OFF

You save
10%

Use Discount Code:

A confirmation link was sent to your e-mail.

Please check your mailbox for a message from support@examlabs.com and follow the directions.

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your email address below to get started with our interactive software demo of your free trial.

  • Realistic exam simulation and exam editor with preview functions
  • Whole exam in a single file with several different question types
  • Customizable exam-taking mode & detailed score reports