Pass Microsoft Azure AZ-140 Exam in First Attempt Easily
Real Microsoft Azure AZ-140 Exam Questions, Accurate & Verified Answers As Experienced in the Actual Test!

Verified by experts
3 products

You save $69.98

AZ-140 Premium Bundle

  • Premium File 372 Questions & Answers
  • Last Update: Oct 25, 2026
  • Training Course 79 Lectures
  • Study Guide 430 Pages
$79.99 $149.97

Purchase Individually

  • Premium File

    372 Questions & Answers
    Last Update: Oct 25, 2026

    $76.99
    $69.99
  • Training Course

    79 Lectures

    $43.99
    $39.99
  • Study Guide

    430 Pages

    $43.99
    $39.99

Configuring and Operating Microsoft Azure Virtual Desktop AZ-140 Practice Test 49

Question 480

The team adopts "Set a realistic maximum session limit based on observed user-density testing" for this AVD requirement: "Pooled session hosts become unstable after more simultaneous logons than memory capacity supports". Which explanation is correct?

  1. Windows Server remote desktop access licensing differs from licensing of supported Windows client multi-session desktops.
  2. Workspaces aggregate the AVD application groups presented to authorized users.
  3. Pool separation supports divergent VM baseline, app and access-policy requirements.
  4. The maximum session limit constrains placement but must be derived from workload and VM memory performance.

Explanation

Correct Answer

D:

The maximum session limit constrains placement but must be derived from workload and VM memory performance. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Windows Server remote desktop access licensing differs from licensing of supported Windows client multi-session desktops. This describes the separate situation "An enterprise plans Windows Server session hosts and assumes its Windows client subscription covers all RDS access" but does not justify the selected fix for the current issue. The decisive behavior is: The maximum session limit constrains placement but must be derived from workload and VM memory performance.

B:

Workspaces aggregate the AVD application groups presented to authorized users. This describes the separate situation "Users need one published workspace containing separate desktop and application resources" but does not justify the selected fix for the current issue. The decisive behavior is: The maximum session limit constrains placement but must be derived from workload and VM memory performance.

C:

Pool separation supports divergent VM baseline, app and access-policy requirements. This describes the separate situation "An organization needs different security policy scope for high-risk developers and ordinary staff" but does not justify the selected fix for the current issue. The decisive behavior is: The maximum session limit constrains placement but must be derived from workload and VM memory performance.

Question 481

An Azure Virtual Desktop administrator observes: Users lose their settings after session hosts are replaced using a new image version. Which response directly addresses this issue?

  1. Keep user profiles on FSLogix or another supported roaming store separate from the immutable host image
  2. Version control image customization steps and include automated validation of required agent versions
  3. Rebuild and release a tested updated image instead of relying only on per-host drift
  4. Follow the supported AVD agent provisioning workflow and register each deployed host separately

Explanation

Correct Answer

A:

Keep user profiles on FSLogix or another supported roaming store separate from the immutable host image. Golden images manage machine configuration, while persistent user state requires an independent storage path. This action directly addresses the conditions in the scenario.

Incorrect Answers

B:

Version control image customization steps and include automated validation of required agent versions. This would be appropriate for the different task-specific situation "A generated image includes an outdated security agent because the manual build instructions were not updated", because An image pipeline prevents undocumented machine changes from silently becoming the deployment baseline. It does not directly resolve the stated condition, which calls for Keep user profiles on FSLogix or another supported roaming store separate from the immutable host image.

C:

Rebuild and release a tested updated image instead of relying only on per-host drift. This would be appropriate for the different task-specific situation "Security updates are applied manually to each pooled session host but the golden image remains unpatched", because A patched image provides a consistent starting security posture for future replacement hosts. It does not directly resolve the stated condition, which calls for Keep user profiles on FSLogix or another supported roaming store separate from the immutable host image.

D:

Follow the supported AVD agent provisioning workflow and register each deployed host separately. This would be appropriate for the different task-specific situation "Administrators install AVD agents manually on an image and accidentally bake an existing host-pool registration into it", because Agent registration represents an individual session host relationship and should not be cloned as a persistent identity. It does not directly resolve the stated condition, which calls for Keep user profiles on FSLogix or another supported roaming store separate from the immutable host image.

Question 482

The Azure Virtual Desktop team plans to "Use a supported traditional image-based or managed application deployment method after compatibility testing" because: An MSI installer modifies Windows services and is incompatible with dynamic App attach packaging. Which explanation supports the plan?

  1. Published application visibility depends on both user entitlement and workspace feed association.
  2. Not every Windows application can be delivered as a suitable App attach package without modification.
  3. OneDrive on shared desktop hosts must use an installation and setup mode supported for multiple users.
  4. Teams real-time media and remote device redirection have separate compatibility and policy requirements.

Explanation

Correct Answer

B:

Not every Windows application can be delivered as a suitable App attach package without modification. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Published application visibility depends on both user entitlement and workspace feed association. This describes the separate situation "A RemoteApp application group exists but no employee can see the published application" but does not justify the selected fix for the current issue. The decisive behavior is: Not every Windows application can be delivered as a suitable App attach package without modification.

C:

OneDrive on shared desktop hosts must use an installation and setup mode supported for multiple users. This describes the separate situation "An administrator installs OneDrive in a single user's profile and expects all pooled users to receive it" but does not justify the selected fix for the current issue. The decisive behavior is: Not every Windows application can be delivered as a suitable App attach package without modification.

D:

Teams real-time media and remote device redirection have separate compatibility and policy requirements. This describes the separate situation "Microsoft Teams calls work, but user cameras do not appear in sessions after a client policy change" but does not justify the selected fix for the current issue. The decisive behavior is: Not every Windows application can be delivered as a suitable App attach package without modification.

Question 483

An enterprise AVD deployment has this requirement: A Linux build worker is expected to create and configure an AVD host pool without using the Azure portal. Choose the most appropriate implementation.

  1. Create the appropriate application group and assign the relevant Microsoft Entra security group
  2. Configure Start VM on Connect and the required platform permissions for the personal host pool
  3. Use the supported Azure CLI desktopvirtualization extension commands with authorized credentials
  4. Include the supported agent and registration process after VM provisioning

Explanation

Correct Answer

C:

Use the supported Azure CLI desktopvirtualization extension commands with authorized credentials. Azure CLI can manage AVD resource configurations through Azure Resource Manager APIs. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Create the appropriate application group and assign the relevant Microsoft Entra security group. This would be appropriate for the different task-specific situation "A call center wants a desktop resource visible only to an authorized employee group", because AVD application group assignments control which users are entitled to publishable desktop resources. It does not directly resolve the stated condition, which calls for Use the supported Azure CLI desktopvirtualization extension commands with authorized credentials.

B:

Configure Start VM on Connect and the required platform permissions for the personal host pool. This would be appropriate for the different task-specific situation "The IT team wants to turn on a powered-off personal VM only when its assigned user connects", because Start VM on Connect permits a supported AVD connection attempt to initiate a deallocated session host VM. It does not directly resolve the stated condition, which calls for Use the supported Azure CLI desktopvirtualization extension commands with authorized credentials.

D:

Include the supported agent and registration process after VM provisioning. This would be appropriate for the different task-specific situation "A PowerShell automation creates only session-host Azure VMs but never registers their AVD agent", because AVD service placement depends on completed host-pool registration, not simply Azure VM creation. It does not directly resolve the stated condition, which calls for Use the supported Azure CLI desktopvirtualization extension commands with authorized credentials.

Question 484

A support engineer corrects "An admin wants to know which session hosts actually accepted connections before a maintenance incident" by choosing "Query historical connection events and host session associations in Log Analytics". What mechanism makes that appropriate?

  1. General VM metrics cannot replace the service-specific events that explain remote resource access failures.
  2. Replacing compute does not automatically recreate every guest telemetry configuration on a new VM.
  3. Host pool readiness depends on agent health and registration, not just Azure VM power state.
  4. Historical diagnostics can reconstruct the involved hosts beyond the currently active session list.

Explanation

Correct Answer

D:

Historical diagnostics can reconstruct the involved hosts beyond the currently active session list. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

General VM metrics cannot replace the service-specific events that explain remote resource access failures. This describes the separate situation "A team uses a generic Azure VM dashboard and assumes it covers all AVD application group connection failures" but does not justify the selected fix for the current issue. The decisive behavior is: Historical diagnostics can reconstruct the involved hosts beyond the currently active session list.

B:

Replacing compute does not automatically recreate every guest telemetry configuration on a new VM. This describes the separate situation "AVD Insights shows no session host performance counters after all VMs were replaced" but does not justify the selected fix for the current issue. The decisive behavior is: Historical diagnostics can reconstruct the involved hosts beyond the currently active session list.

C:

Host pool readiness depends on agent health and registration, not just Azure VM power state. This describes the separate situation "An AVD host appears healthy in Azure Compute but AVD reports its session host agent as unavailable" but does not justify the selected fix for the current issue. The decisive behavior is: Historical diagnostics can reconstruct the involved hosts beyond the currently active session list.

Question 485

While preparing session hosts, an engineer discovers: A session host uses AD DS join and an existing GPO security baseline is not being applied. Which change best meets the requirement?

  1. Investigate group policy scope, OU placement and processing on the Windows host
  2. Deploy supported Trusted Launch session host VM configurations with Secure Boot and vTPM
  3. Test App Control for Business in audit mode and expand rules for legitimate application dependencies
  4. Apply Conditional Access and secure administrative access workflows to sensitive AVD operations

Explanation

Correct Answer

A:

Investigate group policy scope, OU placement and processing on the Windows host. Domain Group Policy applies according to domain join, OU scope and Windows policy processing. This action directly addresses the conditions in the scenario.

Incorrect Answers

B:

Deploy supported Trusted Launch session host VM configurations with Secure Boot and vTPM. This would be appropriate for the different task-specific situation "A regulated desktop service requires Secure Boot and a virtual TPM for supported VM images", because Trusted Launch adds protections against selected boot-level and platform integrity attacks. It does not directly resolve the stated condition, which calls for Investigate group policy scope, OU placement and processing on the Windows host.

C:

Test App Control for Business in audit mode and expand rules for legitimate application dependencies. This would be appropriate for the different task-specific situation "A new allow policy blocks the antivirus update engine because it was enforced without pilot testing", because Audit-first application control reduces outages caused by incomplete allowlisting. It does not directly resolve the stated condition, which calls for Investigate group policy scope, OU placement and processing on the Windows host.

D:

Apply Conditional Access and secure administrative access workflows to sensitive AVD operations. This would be appropriate for the different task-specific situation "Privileged operators connect from untrusted devices to production session hosts without strong authentication controls", because Strong identity and device conditions reduce the risk of unauthorized high-impact management activity. It does not directly resolve the stated condition, which calls for Investigate group policy scope, OU placement and processing on the Windows host.

Question 486

A remote desktop service needs to resolve this condition: A deployment chooses a subnet with no remaining IP addresses and newly provisioned session hosts fail to start. Select the best approach.

  1. Include the supported agent and registration process after VM provisioning
  2. Expand or select suitable subnets with free addresses and rerun deployment
  3. Test required outbound service connectivity and correct proxy or firewall restrictions
  4. Set the host pool maximum session limit based on validated user-density testing

Explanation

Correct Answer

B:

Expand or select suitable subnets with free addresses and rerun deployment. Every session host NIC requires an address from its assigned Azure virtual network subnet. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Include the supported agent and registration process after VM provisioning. This would be appropriate for the different task-specific situation "A PowerShell automation creates only session-host Azure VMs but never registers their AVD agent", because AVD service placement depends on completed host-pool registration, not simply Azure VM creation. It does not directly resolve the stated condition, which calls for Expand or select suitable subnets with free addresses and rerun deployment.

C:

Test required outbound service connectivity and correct proxy or firewall restrictions. This would be appropriate for the different task-specific situation "A private host pool is created but none of its session hosts can reach required Microsoft AVD control endpoints", because Session-host registration and ongoing broker signaling require reliable agent outbound communication. It does not directly resolve the stated condition, which calls for Expand or select suitable subnets with free addresses and rerun deployment.

D:

Set the host pool maximum session limit based on validated user-density testing. This would be appropriate for the different task-specific situation "A pooled host receives far more simultaneous users than planned because its session cap is too high", because Pooled host placement respects configured session limits and load-balancing behavior. It does not directly resolve the stated condition, which calls for Expand or select suitable subnets with free addresses and rerun deployment.

Question 487

A platform team addresses "Log Analytics retention is set too short for a security team's AVD incident review period" with "Set suitable retention and export policies for AVD diagnostics within compliance requirements". Which technical detail justifies the response?

  1. Connection diagnostics identify where a remote session failed before assuming the VM itself is unhealthy.
  2. Connection reliability telemetry distinguishes UDP Shortpath or Multipath paths from TCP fallback behavior.
  3. Diagnostic data is only useful for historical investigations while it remains retained and accessible.
  4. Scaling before known peak demand helps ensure ready capacity is available at sign-in.

Explanation

Correct Answer

C:

Diagnostic data is only useful for historical investigations while it remains retained and accessible. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Connection diagnostics identify where a remote session failed before assuming the VM itself is unhealthy. This describes the separate situation "Desktop connection failures spike during the morning logon peak and operators cannot isolate the failed stage" but does not justify the selected fix for the current issue. The decisive behavior is: Diagnostic data is only useful for historical investigations while it remains retained and accessible.

B:

Connection reliability telemetry distinguishes UDP Shortpath or Multipath paths from TCP fallback behavior. This describes the separate situation "A customer wants to trace which RDP transport mode causes dropped AVD sessions during roaming" but does not justify the selected fix for the current issue. The decisive behavior is: Diagnostic data is only useful for historical investigations while it remains retained and accessible.

D:

Scaling before known peak demand helps ensure ready capacity is available at sign-in. This describes the separate situation "A host pool shows insufficient available session capacity during a predictable daily spike" but does not justify the selected fix for the current issue. The decisive behavior is: Diagnostic data is only useful for historical investigations while it remains retained and accessible.

Question 488

The approved remediation for "An Azure Files SMB profile share is reachable over a public endpoint that security policy forbids" is "Create an authorized storage private endpoint and configure its associated private DNS resolution". Which Azure or Windows behavior explains this?

  1. User profile container consumption depends on application behavior and retention, not only license count.
  2. Broad write access to profile containers can expose or corrupt other users' data.
  3. Snapshots and backups provide recoverable versions that profile replication alone does not guarantee.
  4. Private endpoints provide a private IP path to the Azure Storage file endpoint for eligible client networks.

Explanation

Correct Answer

D:

Private endpoints provide a private IP path to the Azure Storage file endpoint for eligible client networks. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

User profile container consumption depends on application behavior and retention, not only license count. This describes the separate situation "An organization estimates FSLogix capacity using only the number of users and ignores expected application caches" but does not justify the selected fix for the current issue. The decisive behavior is: Private endpoints provide a private IP path to the Azure Storage file endpoint for eligible client networks.

B:

Broad write access to profile containers can expose or corrupt other users' data. This describes the separate situation "An administrator grants everyone Full Control on a profile share to fix a single user logon issue" but does not justify the selected fix for the current issue. The decisive behavior is: Private endpoints provide a private IP path to the Azure Storage file endpoint for eligible client networks.

C:

Snapshots and backups provide recoverable versions that profile replication alone does not guarantee. This describes the separate situation "FSLogix profiles need point-in-time recovery after an accidental deletion of user data" but does not justify the selected fix for the current issue. The decisive behavior is: Private endpoints provide a private IP path to the Azure Storage file endpoint for eligible client networks.

Question 489

A change record states "Associate authorized application groups with the workspace and verify assignments and feed refresh" after observing "The business requires users to see a curated set of resources after signing in to Windows App". What is the key supporting principle?

  1. AVD workspaces are the discovery grouping for users' published desktops and RemoteApps.
  2. Client support is platform-specific, and not every remote access feature works on every device.
  3. RDP redirection controls the remote session's access to local recording devices.
  4. Printer availability depends on the configured print service and the session's printer redirection policy.

Explanation

Correct Answer

A:

AVD workspaces are the discovery grouping for users' published desktops and RemoteApps. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

B:

Client support is platform-specific, and not every remote access feature works on every device. This describes the separate situation "An administrator deploys a Remote Desktop client to an unsupported operating system and users cannot authenticate" but does not justify the selected fix for the current issue. The decisive behavior is: AVD workspaces are the discovery grouping for users' published desktops and RemoteApps.

C:

RDP redirection controls the remote session's access to local recording devices. This describes the separate situation "An organization needs to disable microphone capture inside remote desktops for a regulated user group" but does not justify the selected fix for the current issue. The decisive behavior is: AVD workspaces are the discovery grouping for users' published desktops and RemoteApps.

D:

Printer availability depends on the configured print service and the session's printer redirection policy. This describes the separate situation "Office employees cannot print to a managed company printer from remote AVD sessions" but does not justify the selected fix for the current issue. The decisive behavior is: AVD workspaces are the discovery grouping for users' published desktops and RemoteApps.

Question 490

The team adopts "Evaluate supported managed App attach delivery or scripted deployment based on application packaging support" for this AVD requirement: "An application owner wants to update a line-of-business program without rebuilding the entire desktop image". Which explanation is correct?

  1. App attach user access is controlled through AVD app publication and group entitlement.
  2. Separating application delivery from a golden image can simplify approved app lifecycle updates.
  3. Teams real-time media and remote device redirection have separate compatibility and policy requirements.
  4. Files On-Demand reduces unnecessary full-content downloads for eligible OneDrive files.

Explanation

Correct Answer

B:

Separating application delivery from a golden image can simplify approved app lifecycle updates. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

App attach user access is controlled through AVD app publication and group entitlement. This describes the separate situation "A new packaged app must be available to only one department in a large AVD host pool" but does not justify the selected fix for the current issue. The decisive behavior is: Separating application delivery from a golden image can simplify approved app lifecycle updates.

C:

Teams real-time media and remote device redirection have separate compatibility and policy requirements. This describes the separate situation "Microsoft Teams calls work, but user cameras do not appear in sessions after a client policy change" but does not justify the selected fix for the current issue. The decisive behavior is: Separating application delivery from a golden image can simplify approved app lifecycle updates.

D:

Files On-Demand reduces unnecessary full-content downloads for eligible OneDrive files. This describes the separate situation "OneDrive sync fills session host OS disks because large synchronized files are cached without capacity controls" but does not justify the selected fix for the current issue. The decisive behavior is: Separating application delivery from a golden image can simplify approved app lifecycle updates.

Configuring and Operating Microsoft Azure Virtual Desktop (AZ-140) Practice Tests

Purchase Individually

  • Premium File

    372 Questions & Answers
    Last Update: Oct 25, 2026

    $76.99
    $69.99
  • Training Course

    79 Lectures

    $43.99
    $39.99
  • Study Guide

    430 Pages

    $43.99
    $39.99

SPECIAL OFFER: GET 10% OFF
This is ONE TIME OFFER

You save
10%

Enter Your Email Address to Receive Your 10% Off Discount Code

SPECIAL OFFER: GET 10% OFF

You save
10%

Use Discount Code:

A confirmation link was sent to your e-mail.

Please check your mailbox for a message from support@examlabs.com and follow the directions.

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your email address below to get started with our interactive software demo of your free trial.

  • Realistic exam simulation and exam editor with preview functions
  • Whole exam in a single file with several different question types
  • Customizable exam-taking mode & detailed score reports