Pass Microsoft Azure AZ-140 Exam in First Attempt Easily
Real Microsoft Azure AZ-140 Exam Questions, Accurate & Verified Answers As Experienced in the Actual Test!

Verified by experts
3 products

You save $69.98

AZ-140 Premium Bundle

  • Premium File 372 Questions & Answers
  • Last Update: Oct 25, 2026
  • Training Course 79 Lectures
  • Study Guide 430 Pages
$79.99 $149.97

Purchase Individually

  • Premium File

    372 Questions & Answers
    Last Update: Oct 25, 2026

    $76.99
    $69.99
  • Training Course

    79 Lectures

    $43.99
    $39.99
  • Study Guide

    430 Pages

    $43.99
    $39.99

Configuring and Operating Microsoft Azure Virtual Desktop AZ-140 Practice Test 53

Question 520

An administrator needs to correct the following: An image capture is made before required Microsoft 365 Apps and FSLogix components are installed. Which action is most relevant?

  1. Follow the supported AVD agent provisioning workflow and register each deployed host separately
  2. Pin deployment templates to the approved gallery image version rather than an implicit latest reference
  3. Publish a new immutable image version and pin production deployments to the approved version
  4. Add supported shared-app and profile components to the image build before sealing it

Explanation

Correct Answer

D:

Add supported shared-app and profile components to the image build before sealing it. Every new host inherits the software baseline present in the source image at provisioning time. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Follow the supported AVD agent provisioning workflow and register each deployed host separately. This would be appropriate for the different task-specific situation "Administrators install AVD agents manually on an image and accidentally bake an existing host-pool registration into it", because Agent registration represents an individual session host relationship and should not be cloned as a persistent identity. It does not directly resolve the stated condition, which calls for Add supported shared-app and profile components to the image build before sealing it.

B:

Pin deployment templates to the approved gallery image version rather than an implicit latest reference. This would be appropriate for the different task-specific situation "A production host pool must be replaced without accidentally rolling forward to an untested latest image", because Explicit version selection prevents unexpected upstream image changes from reaching production. It does not directly resolve the stated condition, which calls for Add supported shared-app and profile components to the image build before sealing it.

C:

Publish a new immutable image version and pin production deployments to the approved version. This would be appropriate for the different task-specific situation "A release pipeline overwrites a stable image version instead of creating a new release identity", because Versioned image references support deterministic host replacement and rollback decisions. It does not directly resolve the stated condition, which calls for Add supported shared-app and profile components to the image build before sealing it.

Question 521

An Azure Virtual Desktop administrator observes: A pooled host receives far more simultaneous users than planned because its session cap is too high. Which response directly addresses this issue?

  1. Set the host pool maximum session limit based on validated user-density testing
  2. Include the supported agent and registration process after VM provisioning
  3. Associate the application group with the intended AVD workspace and verify user assignment
  4. Generate a replacement registration token and rerun the authorized registration step

Explanation

Correct Answer

A:

Set the host pool maximum session limit based on validated user-density testing. Pooled host placement respects configured session limits and load-balancing behavior. This action directly addresses the conditions in the scenario.

Incorrect Answers

B:

Include the supported agent and registration process after VM provisioning. This would be appropriate for the different task-specific situation "A PowerShell automation creates only session-host Azure VMs but never registers their AVD agent", because AVD service placement depends on completed host-pool registration, not simply Azure VM creation. It does not directly resolve the stated condition, which calls for Set the host pool maximum session limit based on validated user-density testing.

C:

Associate the application group with the intended AVD workspace and verify user assignment. This would be appropriate for the different task-specific situation "A newly created desktop application group is not shown in any user's remote workspace feed", because Workspace associations determine whether assigned application group resources are exposed in the user's feed. It does not directly resolve the stated condition, which calls for Set the host pool maximum session limit based on validated user-density testing.

D:

Generate a replacement registration token and rerun the authorized registration step. This would be appropriate for the different task-specific situation "A host-pool registration token expired before a batch of session hosts completed deployment", because Expired registration tokens cannot be used to register additional session hosts. It does not directly resolve the stated condition, which calls for Set the host pool maximum session limit based on validated user-density testing.

Question 522

The Azure Virtual Desktop team plans to "Assign the App attach application to the intended user security group through an appropriate application group" because: A new packaged app must be available to only one department in a large AVD host pool. Which explanation supports the plan?

  1. RemoteApp launching depends on finding the requested application at the expected host location.
  2. App attach user access is controlled through AVD app publication and group entitlement.
  3. Staging browser updates reduces fleetwide disruption from extension or application incompatibilities.
  4. Teams real-time media and remote device redirection have separate compatibility and policy requirements.

Explanation

Correct Answer

B:

App attach user access is controlled through AVD app publication and group entitlement. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

RemoteApp launching depends on finding the requested application at the expected host location. This describes the separate situation "A custom application path is entered incorrectly and RemoteApp launches fail with a missing executable" but does not justify the selected fix for the current issue. The decisive behavior is: App attach user access is controlled through AVD app publication and group entitlement.

C:

Staging browser updates reduces fleetwide disruption from extension or application incompatibilities. This describes the separate situation "A new browser release breaks a required internal extension on every host pool after an automatic update" but does not justify the selected fix for the current issue. The decisive behavior is: App attach user access is controlled through AVD app publication and group entitlement.

D:

Teams real-time media and remote device redirection have separate compatibility and policy requirements. This describes the separate situation "Microsoft Teams calls work, but user cameras do not appear in sessions after a client policy change" but does not justify the selected fix for the current issue. The decisive behavior is: App attach user access is controlled through AVD app publication and group entitlement.

Question 523

An enterprise AVD deployment has this requirement: One department wants access to published apps but not the underlying desktop app group. Choose the most appropriate implementation.

  1. Validate client-supported sign-in and MFA combinations in a pilot before broad Conditional Access enforcement
  2. Select a supported Azure Files identity approach such as Microsoft Entra Kerberos and validate all prerequisites
  3. Assign only the required RemoteApp group and review any separately published desktop entitlement
  4. Join session hosts to AD DS and validate network, DNS and domain controller reachability

Explanation

Correct Answer

C:

Assign only the required RemoteApp group and review any separately published desktop entitlement. App group assignment is scoped to specific published AVD resource collections. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Validate client-supported sign-in and MFA combinations in a pilot before broad Conditional Access enforcement. This would be appropriate for the different task-specific situation "A company must enforce an MFA method that works with its Windows App client on supported operating systems", because Authentication method compatibility can vary among AVD clients and session-host identity configurations. It does not directly resolve the stated condition, which calls for Assign only the required RemoteApp group and review any separately published desktop entitlement.

B:

Select a supported Azure Files identity approach such as Microsoft Entra Kerberos and validate all prerequisites. This would be appropriate for the different task-specific situation "A cloud-only Entra user needs to reach a domain-dependent SMB profile share with unsupported identity configuration", because FSLogix profile storage authentication must be compatible with the host's chosen join and user identity model. It does not directly resolve the stated condition, which calls for Assign only the required RemoteApp group and review any separately published desktop entitlement.

D:

Join session hosts to AD DS and validate network, DNS and domain controller reachability. This would be appropriate for the different task-specific situation "A pooled host pool must support legacy Kerberos applications using an existing on-premises Active Directory forest", because AD DS-joined hosts can use established Kerberos and group policy infrastructure when network connectivity is available. It does not directly resolve the stated condition, which calls for Assign only the required RemoteApp group and review any separately published desktop entitlement.

Question 524

A support engineer corrects "One host experiences memory exhaustion but Azure Monitor only shows platform CPU utilization" by choosing "Use Azure Monitor Agent and an appropriate data collection rule for guest memory counters". What mechanism makes that appropriate?

  1. A slow sign-in can stem from profile storage or user logon stages rather than the AVD broker.
  2. Aggregated monitoring can reduce alert fatigue without losing evidence of a shared incident.
  3. AVD scaling plans can deallocate surplus session hosts according to defined operating periods.
  4. Guest OS metrics require supported agent-based collection beyond default platform metrics.

Explanation

Correct Answer

D:

Guest OS metrics require supported agent-based collection beyond default platform metrics. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

A slow sign-in can stem from profile storage or user logon stages rather than the AVD broker. This describes the separate situation "The AVD service desk sees rising sign-in time but has no profile mount or storage latency diagnostics" but does not justify the selected fix for the current issue. The decisive behavior is: Guest OS metrics require supported agent-based collection beyond default platform metrics.

B:

Aggregated monitoring can reduce alert fatigue without losing evidence of a shared incident. This describes the separate situation "The operations team receives hundreds of identical AVD sign-in alerts during one regional network fault" but does not justify the selected fix for the current issue. The decisive behavior is: Guest OS metrics require supported agent-based collection beyond default platform metrics.

C:

AVD scaling plans can deallocate surplus session hosts according to defined operating periods. This describes the separate situation "A pooled host pool runs all its VMs overnight even though no users connect" but does not justify the selected fix for the current issue. The decisive behavior is: Guest OS metrics require supported agent-based collection beyond default platform metrics.

Question 525

While preparing session hosts, an engineer discovers: A release pipeline overwrites a stable image version instead of creating a new release identity. Which change best meets the requirement?

  1. Publish a new immutable image version and pin production deployments to the approved version
  2. Build a pilot host group, validate business apps and roll out new image versions in controlled stages
  3. Follow the supported AVD agent provisioning workflow and register each deployed host separately
  4. Remove per-user artifacts and validate image generalization before publishing

Explanation

Correct Answer

A:

Publish a new immutable image version and pin production deployments to the approved version. Versioned image references support deterministic host replacement and rollback decisions. This action directly addresses the conditions in the scenario.

Incorrect Answers

B:

Build a pilot host group, validate business apps and roll out new image versions in controlled stages. This would be appropriate for the different task-specific situation "A host pool rollout should test a new image without moving every user at once", because Ring-based image rollout limits the blast radius of unexpected driver or application incompatibilities. It does not directly resolve the stated condition, which calls for Publish a new immutable image version and pin production deployments to the approved version.

C:

Follow the supported AVD agent provisioning workflow and register each deployed host separately. This would be appropriate for the different task-specific situation "Administrators install AVD agents manually on an image and accidentally bake an existing host-pool registration into it", because Agent registration represents an individual session host relationship and should not be cloned as a persistent identity. It does not directly resolve the stated condition, which calls for Publish a new immutable image version and pin production deployments to the approved version.

D:

Remove per-user artifacts and validate image generalization before publishing. This would be appropriate for the different task-specific situation "An image build installs a user-specific browser profile under an administrator account that later appears on all hosts", because A reusable desktop image should not include personalized data from the build operator. It does not directly resolve the stated condition, which calls for Publish a new immutable image version and pin production deployments to the approved version.

Question 526

A remote desktop service needs to resolve this condition: Outlook clients keep rebuilding their local mailbox caches on every pooled session host. Select the best approach.

  1. Use narrow documented exclusions and preserve persistent user folders and application settings
  2. Verify the required FSLogix Profile or ODFC configuration and supported Outlook cache paths
  3. Review session state and supported FSLogix concurrent-access behavior before manually changing VHD locks
  4. Repair the profile share's identity-based authentication, share roles and NTFS ACLs

Explanation

Correct Answer

B:

Verify the required FSLogix Profile or ODFC configuration and supported Outlook cache paths. Roaming profile or Office data containers preserve supported application cache content between hosts. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Use narrow documented exclusions and preserve persistent user folders and application settings. This would be appropriate for the different task-specific situation "An admin excludes the entire user profile from FSLogix roaming to reduce storage cost", because Overly broad exclusions undermine the purpose of a roaming profile container. It does not directly resolve the stated condition, which calls for Verify the required FSLogix Profile or ODFC configuration and supported Outlook cache paths.

C:

Review session state and supported FSLogix concurrent-access behavior before manually changing VHD locks. This would be appropriate for the different task-specific situation "A help desk sees one user's profile VHD locked by an older disconnected session during a second login", because A container normally requires coordinated attachment and conflicting sessions can prevent consistent profile writes. It does not directly resolve the stated condition, which calls for Verify the required FSLogix Profile or ODFC configuration and supported Outlook cache paths.

D:

Repair the profile share's identity-based authentication, share roles and NTFS ACLs. This would be appropriate for the different task-specific situation "A user's FSLogix VHD exists but sign-in falls back to a local temporary profile due to SMB access denial", because FSLogix cannot attach a profile disk when the user or host cannot access the backing container. It does not directly resolve the stated condition, which calls for Verify the required FSLogix Profile or ODFC configuration and supported Outlook cache paths.

Question 527

A support ticket states: A service desk assigns the Virtual Machine Administrator Login role to all desktop users to fix one access issue. What is the most targeted remediation?

  1. Select a supported Azure Files identity approach such as Microsoft Entra Kerberos and validate all prerequisites
  2. Validate hybrid identity synchronization and the correct Windows account source for that host
  3. Use the minimum supported Windows session-login role for eligible desktop users and restrict admin login roles
  4. Check Azure RBAC permission for the requested management action separately from application group assignment

Explanation

Correct Answer

C:

Use the minimum supported Windows session-login role for eligible desktop users and restrict admin login roles. Administrative VM login rights exceed the privileges needed for ordinary user desktops. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Select a supported Azure Files identity approach such as Microsoft Entra Kerberos and validate all prerequisites. This would be appropriate for the different task-specific situation "A cloud-only Entra user needs to reach a domain-dependent SMB profile share with unsupported identity configuration", because FSLogix profile storage authentication must be compatible with the host's chosen join and user identity model. It does not directly resolve the stated condition, which calls for Use the minimum supported Windows session-login role for eligible desktop users and restrict admin login roles.

B:

Validate hybrid identity synchronization and the correct Windows account source for that host. This would be appropriate for the different task-specific situation "A user is present in Entra but the AD DS-joined host says the domain account cannot be found", because Cloud directory presence alone does not create a corresponding identity in an unrelated local AD DS forest. It does not directly resolve the stated condition, which calls for Use the minimum supported Windows session-login role for eligible desktop users and restrict admin login roles.

D:

Check Azure RBAC permission for the requested management action separately from application group assignment. This would be appropriate for the different task-specific situation "A desktop user can see an assigned desktop but a separate VM management operation still fails authorization", because Resource management access and user entitlement to a published desktop are different authorization layers. It does not directly resolve the stated condition, which calls for Use the minimum supported Windows session-login role for eligible desktop users and restrict admin login roles.

Question 528

The approved remediation for "A production host must stop accepting new pooled connections while existing user sessions remain active" is "Enable drain mode on that session host before maintenance". Which Azure or Windows behavior explains this?

  1. AVD service placement depends on completed host-pool registration, not simply Azure VM creation.
  2. AVD application group assignments control which users are entitled to publishable desktop resources.
  3. Session hosts on Azure Local use supported local infrastructure with distinct provisioning details from Azure-hosted VMs.
  4. Drain mode prevents new user sessions from landing on a host while allowing existing sessions to finish.

Explanation

Correct Answer

D:

Drain mode prevents new user sessions from landing on a host while allowing existing sessions to finish. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

AVD service placement depends on completed host-pool registration, not simply Azure VM creation. This describes the separate situation "A PowerShell automation creates only session-host Azure VMs but never registers their AVD agent" but does not justify the selected fix for the current issue. The decisive behavior is: Drain mode prevents new user sessions from landing on a host while allowing existing sessions to finish.

B:

AVD application group assignments control which users are entitled to publishable desktop resources. This describes the separate situation "A call center wants a desktop resource visible only to an authorized employee group" but does not justify the selected fix for the current issue. The decisive behavior is: Drain mode prevents new user sessions from landing on a host while allowing existing sessions to finish.

C:

Session hosts on Azure Local use supported local infrastructure with distinct provisioning details from Azure-hosted VMs. This describes the separate situation "An Azure Local session-host deployment is planned as if its VM inventory automatically exists in Azure Compute" but does not justify the selected fix for the current issue. The decisive behavior is: Drain mode prevents new user sessions from landing on a host while allowing existing sessions to finish.

Question 529

An architect must address this AVD condition: AVD Insights shows no session host performance counters after all VMs were replaced. What should the team implement?

  1. Ensure replacement hosts have Azure Monitor Agent and the correct linked data collection rules
  2. Review applicable AVD session and application group diagnostic records with user access controls
  3. Query historical connection events and host session associations in Log Analytics
  4. Validate the configured autoscale mode, host limits and Azure Compute quota constraints

Explanation

Correct Answer

A:

Ensure replacement hosts have Azure Monitor Agent and the correct linked data collection rules. Replacing compute does not automatically recreate every guest telemetry configuration on a new VM. This action directly addresses the conditions in the scenario.

Incorrect Answers

B:

Review applicable AVD session and application group diagnostic records with user access controls. This would be appropriate for the different task-specific situation "Operations needs to see which published RemoteApps users actually launched during a support incident", because AVD monitoring can correlate application assignment with supported connection and session activity. It does not directly resolve the stated condition, which calls for Ensure replacement hosts have Azure Monitor Agent and the correct linked data collection rules.

C:

Query historical connection events and host session associations in Log Analytics. This would be appropriate for the different task-specific situation "An admin wants to know which session hosts actually accepted connections before a maintenance incident", because Historical diagnostics can reconstruct the involved hosts beyond the currently active session list. It does not directly resolve the stated condition, which calls for Ensure replacement hosts have Azure Monitor Agent and the correct linked data collection rules.

D:

Validate the configured autoscale mode, host limits and Azure Compute quota constraints. This would be appropriate for the different task-specific situation "A help desk expects a scaling plan to instantly create an unlimited number of session host VMs", because Scaling automation is limited by plan design and available compute resources. It does not directly resolve the stated condition, which calls for Ensure replacement hosts have Azure Monitor Agent and the correct linked data collection rules.

Question 530

An administrator needs to correct the following: A purchasing plan sizes desktop infrastructure by total employees but ignores concurrent usage patterns. Which action is most relevant?

  1. Set a realistic maximum session limit based on observed user-density testing
  2. Estimate peak concurrent sessions and role-specific CPU, memory and storage needs
  3. Test workload isolation, sizing and optimized application delivery before changing the entire assignment model
  4. Design an AVD scaling plan with minimum capacity, schedules and Start VM on Connect as appropriate

Explanation

Correct Answer

B:

Estimate peak concurrent sessions and role-specific CPU, memory and storage needs. AVD compute sizing is driven by actual concurrent workload demand, not merely assigned headcount. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Set a realistic maximum session limit based on observed user-density testing. This would be appropriate for the different task-specific situation "Pooled session hosts become unstable after more simultaneous logons than memory capacity supports", because The maximum session limit constrains placement but must be derived from workload and VM memory performance. It does not directly resolve the stated condition, which calls for Estimate peak concurrent sessions and role-specific CPU, memory and storage needs.

C:

Test workload isolation, sizing and optimized application delivery before changing the entire assignment model. This would be appropriate for the different task-specific situation "A planning team proposes replacing all pooled desktops with personal VMs after noticing one application's high CPU use", because A single resource-intensive app does not by itself prove every user needs dedicated desktop infrastructure. It does not directly resolve the stated condition, which calls for Estimate peak concurrent sessions and role-specific CPU, memory and storage needs.

D:

Design an AVD scaling plan with minimum capacity, schedules and Start VM on Connect as appropriate. This would be appropriate for the different task-specific situation "Administrators want to minimize cold host start costs during non-business hours", because Autoscale can power down surplus hosts, but sufficient capacity and start-up behavior must still support user sign-ins. It does not directly resolve the stated condition, which calls for Estimate peak concurrent sessions and role-specific CPU, memory and storage needs.

Configuring and Operating Microsoft Azure Virtual Desktop (AZ-140) Practice Tests

Purchase Individually

  • Premium File

    372 Questions & Answers
    Last Update: Oct 25, 2026

    $76.99
    $69.99
  • Training Course

    79 Lectures

    $43.99
    $39.99
  • Study Guide

    430 Pages

    $43.99
    $39.99

SPECIAL OFFER: GET 10% OFF
This is ONE TIME OFFER

You save
10%

Enter Your Email Address to Receive Your 10% Off Discount Code

SPECIAL OFFER: GET 10% OFF

You save
10%

Use Discount Code:

A confirmation link was sent to your e-mail.

Please check your mailbox for a message from support@examlabs.com and follow the directions.

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your email address below to get started with our interactive software demo of your free trial.

  • Realistic exam simulation and exam editor with preview functions
  • Whole exam in a single file with several different question types
  • Customizable exam-taking mode & detailed score reports