Pass Microsoft Azure AZ-140 Exam in First Attempt Easily
Real Microsoft Azure AZ-140 Exam Questions, Accurate & Verified Answers As Experienced in the Actual Test!

Verified by experts
3 products

You save $69.98

AZ-140 Premium Bundle

  • Premium File 372 Questions & Answers
  • Last Update: Oct 25, 2026
  • Training Course 79 Lectures
  • Study Guide 430 Pages
$79.99 $149.97

Purchase Individually

  • Premium File

    372 Questions & Answers
    Last Update: Oct 25, 2026

    $76.99
    $69.99
  • Training Course

    79 Lectures

    $43.99
    $39.99
  • Study Guide

    430 Pages

    $43.99
    $39.99

Configuring and Operating Microsoft Azure Virtual Desktop AZ-140 Practice Test 57

Question 560

The team adopts "Associate the application group with the intended AVD workspace and verify user assignment" for this AVD requirement: "A newly created desktop application group is not shown in any user's remote workspace feed". Which explanation is correct?

  1. AVD service placement depends on completed host-pool registration, not simply Azure VM creation.
  2. Azure CLI can manage AVD resource configurations through Azure Resource Manager APIs.
  3. Windows Server-hosted remote sessions have RDS licensing obligations distinct from Windows Enterprise multi-session rights.
  4. Workspace associations determine whether assigned application group resources are exposed in the user's feed.

Explanation

Correct Answer

D:

Workspace associations determine whether assigned application group resources are exposed in the user's feed. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

AVD service placement depends on completed host-pool registration, not simply Azure VM creation. This describes the separate situation "A PowerShell automation creates only session-host Azure VMs but never registers their AVD agent" but does not justify the selected fix for the current issue. The decisive behavior is: Workspace associations determine whether assigned application group resources are exposed in the user's feed.

B:

Azure CLI can manage AVD resource configurations through Azure Resource Manager APIs. This describes the separate situation "A Linux build worker is expected to create and configure an AVD host pool without using the Azure portal" but does not justify the selected fix for the current issue. The decisive behavior is: Workspace associations determine whether assigned application group resources are exposed in the user's feed.

C:

Windows Server-hosted remote sessions have RDS licensing obligations distinct from Windows Enterprise multi-session rights. This describes the separate situation "Windows Server session hosts are deployed for pooled desktops but the organization has not planned RDS CALs" but does not justify the selected fix for the current issue. The decisive behavior is: Workspace associations determine whether assigned application group resources are exposed in the user's feed.

Question 561

An Azure Virtual Desktop administrator observes: Internet-based users connect successfully but the RDP transport stays on TCP after UDP is blocked by a perimeter firewall. Which response directly addresses this issue?

  1. Allow documented UDP transport paths where policy permits and validate RDP Shortpath connection details
  2. Configure the virtual network DNS servers to resolve private AD DS records and retest SRV lookups
  3. Provide an approved noninteractive outbound proxy path for Azure Virtual Desktop service endpoints
  4. Configure suitable QoS policies and verify prioritized interactive RDP traffic on managed network devices

Explanation

Correct Answer

A:

Allow documented UDP transport paths where policy permits and validate RDP Shortpath connection details. RDP Shortpath uses UDP where possible and falls back to TCP reverse-connect when no usable UDP path is established. This action directly addresses the conditions in the scenario.

Incorrect Answers

B:

Configure the virtual network DNS servers to resolve private AD DS records and retest SRV lookups. This would be appropriate for the different task-specific situation "A session host resolves its domain name to public addresses and cannot contact internal AD controllers", because Domain-joined Windows clients use DNS SRV records to discover domain controllers and authentication services. It does not directly resolve the stated condition, which calls for Allow documented UDP transport paths where policy permits and validate RDP Shortpath connection details.

C:

Provide an approved noninteractive outbound proxy path for Azure Virtual Desktop service endpoints. This would be appropriate for the different task-specific situation "A web filtering proxy requires interactive authentication and prevents unattended AVD agent HTTPS communication", because Session-host agents require reliable machine-level service connectivity even when no user is signed in. It does not directly resolve the stated condition, which calls for Allow documented UDP transport paths where policy permits and validate RDP Shortpath connection details.

D:

Configure suitable QoS policies and verify prioritized interactive RDP traffic on managed network devices. This would be appropriate for the different task-specific situation "A branch has competing real-time desktop audio and bulk file traffic over one constrained WAN circuit", because QoS traffic classification can protect latency-sensitive remote desktop flows under congestion. It does not directly resolve the stated condition, which calls for Allow documented UDP transport paths where policy permits and validate RDP Shortpath connection details.

Question 562

The Azure Virtual Desktop team plans to "Measure SMB transaction demand and select a suitable premium storage performance tier" because: A high-density host pool reports slow FSLogix logons when standard file shares reach their IOPS ceiling. Which explanation supports the plan?

  1. A private endpoint's existence does not automatically grant connectivity and name resolution from all peered networks.
  2. Profile mount storms generate metadata and I/O pressure that can outgrow low-throughput file shares.
  3. Identity-based authentication allows eligible Windows SMB users to access Azure Files with domain credentials and ACLs.
  4. Private endpoints provide a private IP path to the Azure Storage file endpoint for eligible client networks.

Explanation

Correct Answer

B:

Profile mount storms generate metadata and I/O pressure that can outgrow low-throughput file shares. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

A private endpoint's existence does not automatically grant connectivity and name resolution from all peered networks. This describes the separate situation "An SMB private endpoint is reachable from one VNet but inaccessible from another peered workspace VNet" but does not justify the selected fix for the current issue. The decisive behavior is: Profile mount storms generate metadata and I/O pressure that can outgrow low-throughput file shares.

C:

Identity-based authentication allows eligible Windows SMB users to access Azure Files with domain credentials and ACLs. This describes the separate situation "AD DS-joined session hosts must authenticate to Azure Files with existing domain users rather than storage account keys" but does not justify the selected fix for the current issue. The decisive behavior is: Profile mount storms generate metadata and I/O pressure that can outgrow low-throughput file shares.

D:

Private endpoints provide a private IP path to the Azure Storage file endpoint for eligible client networks. This describes the separate situation "An Azure Files SMB profile share is reachable over a public endpoint that security policy forbids" but does not justify the selected fix for the current issue. The decisive behavior is: Profile mount storms generate metadata and I/O pressure that can outgrow low-throughput file shares.

Question 563

An AZ-140 reviewer recommends "Use supported session management to disconnect or sign out the affected session after appropriate notification" for the issue "Help desk staff can see an active session that is unresponsive but do not want to delete its user profile". Which underlying behavior is decisive?

  1. Start VM on Connect powers on supported stopped hosts in response to AVD brokered connection demand.
  2. Client support is platform-specific, and not every remote access feature works on every device.
  3. Session control operations are separate from persistent profile storage and application group configuration.
  4. Clipboard redirection is an adjustable channel between local and remote sessions.

Explanation

Correct Answer

C:

Session control operations are separate from persistent profile storage and application group configuration. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Start VM on Connect powers on supported stopped hosts in response to AVD brokered connection demand. This describes the separate situation "A user requests that a powered-off personal VM start automatically when they open the remote desktop" but does not justify the selected fix for the current issue. The decisive behavior is: Session control operations are separate from persistent profile storage and application group configuration.

B:

Client support is platform-specific, and not every remote access feature works on every device. This describes the separate situation "An administrator deploys a Remote Desktop client to an unsupported operating system and users cannot authenticate" but does not justify the selected fix for the current issue. The decisive behavior is: Session control operations are separate from persistent profile storage and application group configuration.

D:

Clipboard redirection is an adjustable channel between local and remote sessions. This describes the separate situation "An administrator wants to disable clipboard transfer from corporate desktops to unmanaged client devices" but does not justify the selected fix for the current issue. The decisive behavior is: Session control operations are separate from persistent profile storage and application group configuration.

Question 564

The operations team reports the following symptom: A web filtering proxy requires interactive authentication and prevents unattended AVD agent HTTPS communication. Which action should be taken first?

  1. Inspect session connection information and AVD diagnostic connection records for transport details
  2. Configure suitable QoS policies and verify prioritized interactive RDP traffic on managed network devices
  3. Verify supported RDP Multipath client versions and monitor transport failover events
  4. Provide an approved noninteractive outbound proxy path for Azure Virtual Desktop service endpoints

Explanation

Correct Answer

D:

Provide an approved noninteractive outbound proxy path for Azure Virtual Desktop service endpoints. Session-host agents require reliable machine-level service connectivity even when no user is signed in. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Inspect session connection information and AVD diagnostic connection records for transport details. This would be appropriate for the different task-specific situation "The team wants to identify whether AVD sessions used UDP Shortpath or TCP fallback during a fault", because Connection transport telemetry distinguishes the user data path independently of general VM health metrics. It does not directly resolve the stated condition, which calls for Provide an approved noninteractive outbound proxy path for Azure Virtual Desktop service endpoints.

B:

Configure suitable QoS policies and verify prioritized interactive RDP traffic on managed network devices. This would be appropriate for the different task-specific situation "A branch has competing real-time desktop audio and bulk file traffic over one constrained WAN circuit", because QoS traffic classification can protect latency-sensitive remote desktop flows under congestion. It does not directly resolve the stated condition, which calls for Provide an approved noninteractive outbound proxy path for Azure Virtual Desktop service endpoints.

C:

Verify supported RDP Multipath client versions and monitor transport failover events. This would be appropriate for the different task-specific situation "Users report session drops when their laptops roam between Wi-Fi and mobile connectivity", because Multipath can switch among viable backup UDP or TCP paths when an active session route degrades. It does not directly resolve the stated condition, which calls for Provide an approved noninteractive outbound proxy path for Azure Virtual Desktop service endpoints.

Question 565

Consider this AVD design: Administrators install AVD agents manually on an image and accidentally bake an existing host-pool registration into it. The action is "Follow the supported AVD agent provisioning workflow and register each deployed host separately". Which statement explains this choice?

  1. Agent registration represents an individual session host relationship and should not be cloned as a persistent identity.
  2. Versioned image references support deterministic host replacement and rollback decisions.
  3. Credentials baked into image disks are copied to every descendant VM and increase compromise exposure.
  4. Traceable image baselines simplify patch compliance and recovery from known OS regressions.

Explanation

Correct Answer

A:

Agent registration represents an individual session host relationship and should not be cloned as a persistent identity. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

B:

Versioned image references support deterministic host replacement and rollback decisions. This describes the separate situation "A release pipeline overwrites a stable image version instead of creating a new release identity" but does not justify the selected fix for the current issue. The decisive behavior is: Agent registration represents an individual session host relationship and should not be cloned as a persistent identity.

C:

Credentials baked into image disks are copied to every descendant VM and increase compromise exposure. This describes the separate situation "A source VM image includes a private admin credential in a startup script visible to every provisioned host" but does not justify the selected fix for the current issue. The decisive behavior is: Agent registration represents an individual session host relationship and should not be cloned as a persistent identity.

D:

Traceable image baselines simplify patch compliance and recovery from known OS regressions. This describes the separate situation "The team builds session host images without recording which Windows cumulative updates were present" but does not justify the selected fix for the current issue. The decisive behavior is: Agent registration represents an individual session host relationship and should not be cloned as a persistent identity.

Question 566

For a deployment problem, "A global desktop deployment experiences unacceptable latency because all hosts are located far from users", administrators choose "Compare target user locations and region-specific capacity before selecting session-host deployment regions". Why does that solve it?

  1. Pool separation supports divergent VM baseline, app and access-policy requirements.
  2. User-to-compute proximity and available regional VM families affect user experience.
  3. Personal and pooled host pool types have different user-assignment and session-placement behavior.
  4. Graphics workloads may require accelerated rendering resources rather than only more CPU cores.

Explanation

Correct Answer

B:

User-to-compute proximity and available regional VM families affect user experience. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Pool separation supports divergent VM baseline, app and access-policy requirements. This describes the separate situation "An organization needs different security policy scope for high-risk developers and ordinary staff" but does not justify the selected fix for the current issue. The decisive behavior is: User-to-compute proximity and available regional VM families affect user experience.

C:

Personal and pooled host pool types have different user-assignment and session-placement behavior. This describes the separate situation "A proposed architecture places a personal desktop and a shared pooled desktop in one host pool" but does not justify the selected fix for the current issue. The decisive behavior is: User-to-compute proximity and available regional VM families affect user experience.

D:

Graphics workloads may require accelerated rendering resources rather than only more CPU cores. This describes the separate situation "Graphic designers run demanding 3D applications and CPU-only general-purpose VMs perform poorly" but does not justify the selected fix for the current issue. The decisive behavior is: User-to-compute proximity and available regional VM families affect user experience.

Question 567

A platform team addresses "A host has a stale local Windows profile and FSLogix refuses to attach the new container for the user" with "Evaluate DeleteLocalProfileWhenVHDShouldApply with a tested migration and data-protection plan". Which technical detail justifies the response?

  1. App Masking can control application visibility without reinstalling the app per user.
  2. Identity protocol hardening can interrupt profile storage access when server and client encryption capabilities diverge.
  3. Existing local profiles can interfere with applying a roaming profile container to a previously used host.
  4. Cloud Cache supports resilience to interruptions but still needs remote providers for durable profile synchronization.

Explanation

Correct Answer

C:

Existing local profiles can interfere with applying a roaming profile container to a previously used host. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

App Masking can control application visibility without reinstalling the app per user. This describes the separate situation "An application that is installed on all pooled session hosts must be hidden from nonlicensed users" but does not justify the selected fix for the current issue. The decisive behavior is: Existing local profiles can interfere with applying a roaming profile container to a previously used host.

B:

Identity protocol hardening can interrupt profile storage access when server and client encryption capabilities diverge. This describes the separate situation "FSLogix profile mount fails after Windows Server Kerberos security hardening changes the acceptable encryption types" but does not justify the selected fix for the current issue. The decisive behavior is: Existing local profiles can interfere with applying a roaming profile container to a previously used host.

D:

Cloud Cache supports resilience to interruptions but still needs remote providers for durable profile synchronization. This describes the separate situation "An administrator expects Cloud Cache to eliminate the need for any reachable remote storage indefinitely" but does not justify the selected fix for the current issue. The decisive behavior is: Existing local profiles can interfere with applying a roaming profile container to a previously used host.

Question 568

The approved remediation for "An administrator wants to disable clipboard transfer from corporate desktops to unmanaged client devices" is "Configure applicable host pool RDP clipboard redirection properties and device management controls". Which Azure or Windows behavior explains this?

  1. Session control operations are separate from persistent profile storage and application group configuration.
  2. Start VM on Connect is a demand-driven startup mechanism and does not necessarily power every pooled host at once.
  3. Central client deployment reduces version drift and ensures supported feature availability.
  4. Clipboard redirection is an adjustable channel between local and remote sessions.

Explanation

Correct Answer

D:

Clipboard redirection is an adjustable channel between local and remote sessions. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Session control operations are separate from persistent profile storage and application group configuration. This describes the separate situation "Help desk staff can see an active session that is unresponsive but do not want to delete its user profile" but does not justify the selected fix for the current issue. The decisive behavior is: Clipboard redirection is an adjustable channel between local and remote sessions.

B:

Start VM on Connect is a demand-driven startup mechanism and does not necessarily power every pooled host at once. This describes the separate situation "Start VM on Connect is enabled in a pooled host pool but users expect it to boot all deallocated VMs immediately" but does not justify the selected fix for the current issue. The decisive behavior is: Clipboard redirection is an adjustable channel between local and remote sessions.

C:

Central client deployment reduces version drift and ensures supported feature availability. This describes the separate situation "A new Windows App release must reach all managed corporate laptops consistently" but does not justify the selected fix for the current issue. The decisive behavior is: Clipboard redirection is an adjustable channel between local and remote sessions.

Question 569

An architect must address this AVD condition: A customer tries to enable Trusted Launch on a VM size and image combination that does not support it. What should the team implement?

  1. Select compatible VM families, image generation and security-profile settings
  2. Use Azure Bastion or another approved protected administration path and remove unnecessary public RDP rules
  3. Apply Conditional Access and secure administrative access workflows to sensitive AVD operations
  4. Configure supported update reporting and remediation for the session-host operating system

Explanation

Correct Answer

A:

Select compatible VM families, image generation and security-profile settings. Trusted Launch support is constrained by eligible VM hardware and operating system image features. This action directly addresses the conditions in the scenario.

Incorrect Answers

B:

Use Azure Bastion or another approved protected administration path and remove unnecessary public RDP rules. This would be appropriate for the different task-specific situation "Administrative RDP access to AVD VMs currently requires exposing TCP 3389 to the public internet", because Azure Bastion supports management access without placing direct public IP and RDP exposure on every VM. It does not directly resolve the stated condition, which calls for Select compatible VM families, image generation and security-profile settings.

C:

Apply Conditional Access and secure administrative access workflows to sensitive AVD operations. This would be appropriate for the different task-specific situation "Privileged operators connect from untrusted devices to production session hosts without strong authentication controls", because Strong identity and device conditions reduce the risk of unauthorized high-impact management activity. It does not directly resolve the stated condition, which calls for Select compatible VM families, image generation and security-profile settings.

D:

Configure supported update reporting and remediation for the session-host operating system. This would be appropriate for the different task-specific situation "A production host has outdated Windows security updates but no inventory of patch compliance", because Security baselines require visibility into patch status and timely correction of missing updates. It does not directly resolve the stated condition, which calls for Select compatible VM families, image generation and security-profile settings.

Question 570

The team adopts "Deploy and update the approved client through Microsoft Intune or another managed software channel" for this AVD requirement: "A new Windows App release must reach all managed corporate laptops consistently". Which explanation is correct?

  1. Placement settings can prevent optimal use of available pooled compute capacity.
  2. Central client deployment reduces version drift and ensures supported feature availability.
  3. Session control operations are separate from persistent profile storage and application group configuration.
  4. Resource discovery reflects workspace entitlements separately from the ability to authenticate.

Explanation

Correct Answer

B:

Central client deployment reduces version drift and ensures supported feature availability. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Placement settings can prevent optimal use of available pooled compute capacity. This describes the separate situation "A pooled desktop host's maximum session limit causes users to wait although spare CPU exists on other hosts" but does not justify the selected fix for the current issue. The decisive behavior is: Central client deployment reduces version drift and ensures supported feature availability.

C:

Session control operations are separate from persistent profile storage and application group configuration. This describes the separate situation "Help desk staff can see an active session that is unresponsive but do not want to delete its user profile" but does not justify the selected fix for the current issue. The decisive behavior is: Central client deployment reduces version drift and ensures supported feature availability.

D:

Resource discovery reflects workspace entitlements separately from the ability to authenticate. This describes the separate situation "A user connects successfully but their published resources never appear in the client feed" but does not justify the selected fix for the current issue. The decisive behavior is: Central client deployment reduces version drift and ensures supported feature availability.

Configuring and Operating Microsoft Azure Virtual Desktop (AZ-140) Practice Tests

Purchase Individually

  • Premium File

    372 Questions & Answers
    Last Update: Oct 25, 2026

    $76.99
    $69.99
  • Training Course

    79 Lectures

    $43.99
    $39.99
  • Study Guide

    430 Pages

    $43.99
    $39.99

SPECIAL OFFER: GET 10% OFF
This is ONE TIME OFFER

You save
10%

Enter Your Email Address to Receive Your 10% Off Discount Code

SPECIAL OFFER: GET 10% OFF

You save
10%

Use Discount Code:

A confirmation link was sent to your e-mail.

Please check your mailbox for a message from support@examlabs.com and follow the directions.

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your email address below to get started with our interactive software demo of your free trial.

  • Realistic exam simulation and exam editor with preview functions
  • Whole exam in a single file with several different question types
  • Customizable exam-taking mode & detailed score reports