Pass Microsoft Azure AZ-140 Exam in First Attempt Easily
Real Microsoft Azure AZ-140 Exam Questions, Accurate & Verified Answers As Experienced in the Actual Test!

Verified by experts
3 products

You save $69.98

AZ-140 Premium Bundle

  • Premium File 372 Questions & Answers
  • Last Update: Oct 25, 2026
  • Training Course 79 Lectures
  • Study Guide 430 Pages
$79.99 $149.97

Purchase Individually

  • Premium File

    372 Questions & Answers
    Last Update: Oct 25, 2026

    $76.99
    $69.99
  • Training Course

    79 Lectures

    $43.99
    $39.99
  • Study Guide

    430 Pages

    $43.99
    $39.99

Configuring and Operating Microsoft Azure Virtual Desktop AZ-140 Practice Test 65

Question 640

The team adopts "Verify clipboard redirection permissions and the client feature support" for this AVD requirement: "An application cannot paste text from a local client even though its clipboard works within the remote desktop". Which explanation is correct?

  1. Windows policy processing determines user experience settings independently of the host pool resource definition.
  2. Windows printer selection rules can differ when locally redirected devices are present.
  3. Session control operations are separate from persistent profile storage and application group configuration.
  4. Clipboard sharing requires a permitted remote device channel, not only Windows clipboard functionality on the host.

Explanation

Correct Answer

D:

Clipboard sharing requires a permitted remote device channel, not only Windows clipboard functionality on the host. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Windows policy processing determines user experience settings independently of the host pool resource definition. This describes the separate situation "A shared host pool has inconsistent Start menu and Windows settings because user policies differ across OUs" but does not justify the selected fix for the current issue. The decisive behavior is: Clipboard sharing requires a permitted remote device channel, not only Windows clipboard functionality on the host.

B:

Windows printer selection rules can differ when locally redirected devices are present. This describes the separate situation "A remote help desk app prints to local devices but documents always use the wrong default printer" but does not justify the selected fix for the current issue. The decisive behavior is: Clipboard sharing requires a permitted remote device channel, not only Windows clipboard functionality on the host.

C:

Session control operations are separate from persistent profile storage and application group configuration. This describes the separate situation "Help desk staff can see an active session that is unresponsive but do not want to delete its user profile" but does not justify the selected fix for the current issue. The decisive behavior is: Clipboard sharing requires a permitted remote device channel, not only Windows clipboard functionality on the host.

Question 641

For the scenario "A regulated desktop deployment must keep supported AVD service connections on private access paths", a team selects "Design Azure Virtual Desktop Private Link with appropriate private endpoints and published feature prerequisites". Which technical principle best explains why it works?

  1. AVD Private Link can restrict supported service connection traffic to private network access rather than public service endpoints.
  2. RDP Multipath maintains multiple potential transport flows per session, increasing port planning requirements.
  3. Domain-joined Windows clients use DNS SRV records to discover domain controllers and authentication services.
  4. FSLogix sign-in performance depends on consistent and sufficiently low-latency access to its container storage.

Explanation

Correct Answer

A:

AVD Private Link can restrict supported service connection traffic to private network access rather than public service endpoints. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

B:

RDP Multipath maintains multiple potential transport flows per session, increasing port planning requirements. This describes the separate situation "A firewall team plans to allow only one outbound source port for every RDP Multipath session" but does not justify the selected fix for the current issue. The decisive behavior is: AVD Private Link can restrict supported service connection traffic to private network access rather than public service endpoints.

C:

Domain-joined Windows clients use DNS SRV records to discover domain controllers and authentication services. This describes the separate situation "A session host resolves its domain name to public addresses and cannot contact internal AD controllers" but does not justify the selected fix for the current issue. The decisive behavior is: AVD Private Link can restrict supported service connection traffic to private network access rather than public service endpoints.

D:

FSLogix sign-in performance depends on consistent and sufficiently low-latency access to its container storage. This describes the separate situation "Profile containers load slowly because session hosts traverse a high-latency WAN to their file shares" but does not justify the selected fix for the current issue. The decisive behavior is: AVD Private Link can restrict supported service connection traffic to private network access rather than public service endpoints.

Question 642

A Microsoft AZ-140 deployment review finds: An application owner wants to update a line-of-business program without rebuilding the entire desktop image. What is the best corrective action?

  1. Validate both Teams optimization status and allowed client camera redirection policies
  2. Evaluate supported managed App attach delivery or scripted deployment based on application packaging support
  3. Validate supported FSLogix profile handling and Office identity persistence
  4. Plan supported package version rollout and session refresh or logoff behavior

Explanation

Correct Answer

B:

Evaluate supported managed App attach delivery or scripted deployment based on application packaging support. Separating application delivery from a golden image can simplify approved app lifecycle updates. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Validate both Teams optimization status and allowed client camera redirection policies. This would be appropriate for the different task-specific situation "Microsoft Teams calls work, but user cameras do not appear in sessions after a client policy change", because Teams real-time media and remote device redirection have separate compatibility and policy requirements. It does not directly resolve the stated condition, which calls for Evaluate supported managed App attach delivery or scripted deployment based on application packaging support.

C:

Validate supported FSLogix profile handling and Office identity persistence. This would be appropriate for the different task-specific situation "Users repeatedly sign in to Microsoft 365 Apps because authentication tokens are not preserved between pooled hosts", because Roaming the applicable user profile or app data can preserve supported Microsoft 365 session state. It does not directly resolve the stated condition, which calls for Evaluate supported managed App attach delivery or scripted deployment based on application packaging support.

D:

Plan supported package version rollout and session refresh or logoff behavior. This would be appropriate for the different task-specific situation "An operations team expects replacing an App attach package image to update every existing user session instantly", because Application package lifecycle changes may require a new session or supported refresh process to take effect. It does not directly resolve the stated condition, which calls for Evaluate supported managed App attach delivery or scripted deployment based on application packaging support.

Question 643

An AZ-140 reviewer recommends "Review session state and supported FSLogix concurrent-access behavior before manually changing VHD locks" for the issue "A help desk sees one user's profile VHD locked by an older disconnected session during a second login". Which underlying behavior is decisive?

  1. Application masking does not replace Windows privileges or security enforcement for privileged users.
  2. FSLogix can select which users receive profile processing through configured group membership rules.
  3. A container normally requires coordinated attachment and conflicting sessions can prevent consistent profile writes.
  4. Hosts continue looking for profile disks according to configured locations until policies are updated.

Explanation

Correct Answer

C:

A container normally requires coordinated attachment and conflicting sessions can prevent consistent profile writes. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Application masking does not replace Windows privileges or security enforcement for privileged users. This describes the separate situation "An administrator assumes FSLogix App Masking is a full security boundary against a malicious local administrator" but does not justify the selected fix for the current issue. The decisive behavior is: A container normally requires coordinated attachment and conflicting sessions can prevent consistent profile writes.

B:

FSLogix can select which users receive profile processing through configured group membership rules. This describes the separate situation "A security group requests that only its members receive a special FSLogix configuration" but does not justify the selected fix for the current issue. The decisive behavior is: A container normally requires coordinated attachment and conflicting sessions can prevent consistent profile writes.

D:

Hosts continue looking for profile disks according to configured locations until policies are updated. This describes the separate situation "An FSLogix profile share is moved to a new UNC path but every host still refers to the prior location" but does not justify the selected fix for the current issue. The decisive behavior is: A container normally requires coordinated attachment and conflicting sessions can prevent consistent profile writes.

Question 644

A support engineer corrects "Two administrative teams need independent control of host pools within the same subscription" by choosing "Apply resource-group or individual resource-scoped RBAC assignments for each team". What mechanism makes that appropriate?

  1. Entra-joined VM sign-in authorization may depend on Azure role assignments in addition to AVD app group access.
  2. AVD single sign-on can reduce repeated authentication prompts when its identity conditions are met.
  3. FSLogix profile storage authentication must be compatible with the host's chosen join and user identity model.
  4. Azure RBAC supports delegated permissions at different resource hierarchy scopes.

Explanation

Correct Answer

D:

Azure RBAC supports delegated permissions at different resource hierarchy scopes. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Entra-joined VM sign-in authorization may depend on Azure role assignments in addition to AVD app group access. This describes the separate situation "An Entra joined host is registered but its assigned users lack an eligible Windows login role" but does not justify the selected fix for the current issue. The decisive behavior is: Azure RBAC supports delegated permissions at different resource hierarchy scopes.

B:

AVD single sign-on can reduce repeated authentication prompts when its identity conditions are met. This describes the separate situation "An AVD sign-in process asks users to authenticate to the broker and then enter credentials again at Windows" but does not justify the selected fix for the current issue. The decisive behavior is: Azure RBAC supports delegated permissions at different resource hierarchy scopes.

C:

FSLogix profile storage authentication must be compatible with the host's chosen join and user identity model. This describes the separate situation "A cloud-only Entra user needs to reach a domain-dependent SMB profile share with unsupported identity configuration" but does not justify the selected fix for the current issue. The decisive behavior is: Azure RBAC supports delegated permissions at different resource hierarchy scopes.

Question 645

Consider this AVD design: A desktop outage occurs after a new golden image is released and operations have no safe rollback version. The action is "Keep the last approved image version and defined host rollback procedures". Which statement explains this choice?

  1. Versioned image artifacts permit controlled restoration of a known-good desktop baseline.
  2. Point-in-time snapshots help recover profile volumes from accidental modification or corruption.
  3. End-to-end AVD continuity depends on restoring usable sessions, not merely confirming backups exist.
  4. Disaster recovery capacity depends on having deployable compute SKU resources when failover begins.

Explanation

Correct Answer

A:

Versioned image artifacts permit controlled restoration of a known-good desktop baseline. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

B:

Point-in-time snapshots help recover profile volumes from accidental modification or corruption. This describes the separate situation "Azure NetApp Files stores FSLogix data but no immutable recovery schedule is defined" but does not justify the selected fix for the current issue. The decisive behavior is: Versioned image artifacts permit controlled restoration of a known-good desktop baseline.

C:

End-to-end AVD continuity depends on restoring usable sessions, not merely confirming backups exist. This describes the separate situation "The disaster recovery documentation contains a list of backup services but no tested routing or client reconnect process" but does not justify the selected fix for the current issue. The decisive behavior is: Versioned image artifacts permit controlled restoration of a known-good desktop baseline.

D:

Disaster recovery capacity depends on having deployable compute SKU resources when failover begins. This describes the separate situation "The team plans a multi-region AVD environment but selects a recovery region with no GPU VM quota for its designers" but does not justify the selected fix for the current issue. The decisive behavior is: Versioned image artifacts permit controlled restoration of a known-good desktop baseline.

Question 646

A remote desktop service needs to resolve this condition: Multiple storage accounts are created without evaluating FSLogix concurrent IOPS and throughput needs. Select the best approach.

  1. Keep independent versioned backup and tested restore procedures for corrupted or deleted profile files
  2. Model profile attach, detach, and logon-storm performance before partitioning storage
  3. Schedule compatible Azure NetApp Files snapshots and validate volume or file recovery procedures
  4. Verify both share-level role assignment and NTFS permissions on the SMB path

Explanation

Correct Answer

B:

Model profile attach, detach, and logon-storm performance before partitioning storage. Storage throughput and operation limits can affect user density independently of total provisioned GiB. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Keep independent versioned backup and tested restore procedures for corrupted or deleted profile files. This would be appropriate for the different task-specific situation "An Azure Files share is replicated but administrators assume replication replaces all backups", because Replication can propagate undesirable changes and does not itself ensure recoverable historical user data. It does not directly resolve the stated condition, which calls for Model profile attach, detach, and logon-storm performance before partitioning storage.

C:

Schedule compatible Azure NetApp Files snapshots and validate volume or file recovery procedures. This would be appropriate for the different task-specific situation "The enterprise needs rapid recovery of a damaged Azure NetApp Files profile volume", because ANF snapshots preserve point-in-time volume state that can support recovery from accidental modification. It does not directly resolve the stated condition, which calls for Model profile attach, detach, and logon-storm performance before partitioning storage.

D:

Verify both share-level role assignment and NTFS permissions on the SMB path. This would be appropriate for the different task-specific situation "Users have Azure Files share-level RBAC but still get access denied creating their FSLogix container folder", because Azure Files identity-based SMB authorization combines share-level permission checks with file and folder ACLs. It does not directly resolve the stated condition, which calls for Model profile attach, detach, and logon-storm performance before partitioning storage.

Question 647

A platform team addresses "An AVD host's Microsoft 365 Apps are installed but users receive licensing errors even with valid subscriptions" with "Check shared computer activation configuration, sign-in eligibility and Office licensing telemetry". Which technical detail justifies the response?

  1. Packaging must preserve the executable's required runtime dependencies for successful remote launch.
  2. Applications with system-level dependencies often require installation before shared users sign in.
  3. Application activation has specific shared-host prerequisites beyond simply copying installed binaries.
  4. Teams optimization can redirect eligible audio and video processing to the local endpoint.

Explanation

Correct Answer

C:

Application activation has specific shared-host prerequisites beyond simply copying installed binaries. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Packaging must preserve the executable's required runtime dependencies for successful remote launch. This describes the separate situation "A packaged application depends on a DLL that was omitted during MSIX preparation and fails to launch" but does not justify the selected fix for the current issue. The decisive behavior is: Application activation has specific shared-host prerequisites beyond simply copying installed binaries.

B:

Applications with system-level dependencies often require installation before shared users sign in. This describes the separate situation "A line-of-business app needs a machine-wide registry key and service that cannot be delivered reliably per user" but does not justify the selected fix for the current issue. The decisive behavior is: Application activation has specific shared-host prerequisites beyond simply copying installed binaries.

D:

Teams optimization can redirect eligible audio and video processing to the local endpoint. This describes the separate situation "Microsoft Teams voice calls inside AVD consume excessive host CPU because media redirection is inactive" but does not justify the selected fix for the current issue. The decisive behavior is: Application activation has specific shared-host prerequisites beyond simply copying installed binaries.

Question 648

The approved remediation for "An administrator expects Cloud Cache to eliminate the need for any reachable remote storage indefinitely" is "Plan remote provider availability and cache recovery rather than treating a local cache as permanent backup". Which Azure or Windows behavior explains this?

  1. Simultaneous container attachment needs coordinated handling to prevent conflicting profile writes.
  2. App Masking can control application visibility without reinstalling the app per user.
  3. Identity protocol hardening can interrupt profile storage access when server and client encryption capabilities diverge.
  4. Cloud Cache supports resilience to interruptions but still needs remote providers for durable profile synchronization.

Explanation

Correct Answer

D:

Cloud Cache supports resilience to interruptions but still needs remote providers for durable profile synchronization. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Simultaneous container attachment needs coordinated handling to prevent conflicting profile writes. This describes the separate situation "A user tries to sign in to two pooled session hosts concurrently and both are set to write the same VHD" but does not justify the selected fix for the current issue. The decisive behavior is: Cloud Cache supports resilience to interruptions but still needs remote providers for durable profile synchronization.

B:

App Masking can control application visibility without reinstalling the app per user. This describes the separate situation "An application that is installed on all pooled session hosts must be hidden from nonlicensed users" but does not justify the selected fix for the current issue. The decisive behavior is: Cloud Cache supports resilience to interruptions but still needs remote providers for durable profile synchronization.

C:

Identity protocol hardening can interrupt profile storage access when server and client encryption capabilities diverge. This describes the separate situation "FSLogix profile mount fails after Windows Server Kerberos security hardening changes the acceptable encryption types" but does not justify the selected fix for the current issue. The decisive behavior is: Cloud Cache supports resilience to interruptions but still needs remote providers for durable profile synchronization.

Question 649

An architect must address this AVD condition: A captured image works in the build VNet but fails in production because its embedded script hard-codes one domain controller. What should the team implement?

  1. Move environment-specific values into deployment parameters and keep the image environment-neutral
  2. Build and test the image according to application vendor and Windows multi-session installation requirements
  3. Publish an Azure Compute Gallery image version with supported regional replication
  4. Follow the supported AVD agent provisioning workflow and register each deployed host separately

Explanation

Correct Answer

A:

Move environment-specific values into deployment parameters and keep the image environment-neutral. Image portability improves when deployment-specific settings are injected when the host is created. This action directly addresses the conditions in the scenario.

Incorrect Answers

B:

Build and test the image according to application vendor and Windows multi-session installation requirements. This would be appropriate for the different task-specific situation "An image deployment plan uses a multi-session client image with unsupported application installation sequence", because Multi-session compatibility can depend on system-wide installation and shared activation patterns. It does not directly resolve the stated condition, which calls for Move environment-specific values into deployment parameters and keep the image environment-neutral.

C:

Publish an Azure Compute Gallery image version with supported regional replication. This would be appropriate for the different task-specific situation "Host pools across two regions require the same tested Windows multi-session image release", because Azure Compute Gallery can distribute versioned image artifacts to configured regions for VM deployment. It does not directly resolve the stated condition, which calls for Move environment-specific values into deployment parameters and keep the image environment-neutral.

D:

Follow the supported AVD agent provisioning workflow and register each deployed host separately. This would be appropriate for the different task-specific situation "Administrators install AVD agents manually on an image and accidentally bake an existing host-pool registration into it", because Agent registration represents an individual session host relationship and should not be cloned as a persistent identity. It does not directly resolve the stated condition, which calls for Move environment-specific values into deployment parameters and keep the image environment-neutral.

Question 650

An administrator needs to correct the following: Operations sees VM CPU graphs but cannot search AVD user session connection failures. Which action is most relevant?

  1. Tune ramp-down session handling, disconnect timeout and deallocation policies
  2. Collect the relevant AVD connection and error diagnostics and query them in Log Analytics
  3. Use session counts and host availability trends to refine scaling plan ramp-up times
  4. Configure an AVD autoscale scaling plan with appropriate schedules and minimum capacity

Explanation

Correct Answer

B:

Collect the relevant AVD connection and error diagnostics and query them in Log Analytics. AVD service connection telemetry is distinct from Azure VM performance counters. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Tune ramp-down session handling, disconnect timeout and deallocation policies. This would be appropriate for the different task-specific situation "A scaling plan powers off hosts too aggressively while employees have disconnected but resumable sessions", because Autoscale decisions must account for existing user session state to avoid disruption. It does not directly resolve the stated condition, which calls for Collect the relevant AVD connection and error diagnostics and query them in Log Analytics.

C:

Use session counts and host availability trends to refine scaling plan ramp-up times. This would be appropriate for the different task-specific situation "A host pool shows insufficient available session capacity during a predictable daily spike", because Scaling before known peak demand helps ensure ready capacity is available at sign-in. It does not directly resolve the stated condition, which calls for Collect the relevant AVD connection and error diagnostics and query them in Log Analytics.

D:

Configure an AVD autoscale scaling plan with appropriate schedules and minimum capacity. This would be appropriate for the different task-specific situation "A pooled host pool runs all its VMs overnight even though no users connect", because AVD scaling plans can deallocate surplus session hosts according to defined operating periods. It does not directly resolve the stated condition, which calls for Collect the relevant AVD connection and error diagnostics and query them in Log Analytics.

Configuring and Operating Microsoft Azure Virtual Desktop (AZ-140) Practice Tests

Purchase Individually

  • Premium File

    372 Questions & Answers
    Last Update: Oct 25, 2026

    $76.99
    $69.99
  • Training Course

    79 Lectures

    $43.99
    $39.99
  • Study Guide

    430 Pages

    $43.99
    $39.99

SPECIAL OFFER: GET 10% OFF
This is ONE TIME OFFER

You save
10%

Enter Your Email Address to Receive Your 10% Off Discount Code

SPECIAL OFFER: GET 10% OFF

You save
10%

Use Discount Code:

A confirmation link was sent to your e-mail.

Please check your mailbox for a message from support@examlabs.com and follow the directions.

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your email address below to get started with our interactive software demo of your free trial.

  • Realistic exam simulation and exam editor with preview functions
  • Whole exam in a single file with several different question types
  • Customizable exam-taking mode & detailed score reports