Pass Microsoft Azure AZ-140 Exam in First Attempt Easily
Real Microsoft Azure AZ-140 Exam Questions, Accurate & Verified Answers As Experienced in the Actual Test!

Verified by experts
3 products

You save $69.98

AZ-140 Premium Bundle

  • Premium File 372 Questions & Answers
  • Last Update: Oct 25, 2026
  • Training Course 79 Lectures
  • Study Guide 430 Pages
$79.99 $149.97

Purchase Individually

  • Premium File

    372 Questions & Answers
    Last Update: Oct 25, 2026

    $76.99
    $69.99
  • Training Course

    79 Lectures

    $43.99
    $39.99
  • Study Guide

    430 Pages

    $43.99
    $39.99

Configuring and Operating Microsoft Azure Virtual Desktop AZ-140 Practice Test 67

Question 660

The team adopts "Evaluate supported profile VHD compaction and cleanup procedures during maintenance" for this AVD requirement: "FSLogix container VHDs remain very large after users delete files inside their Windows profiles". Which explanation is correct?

  1. ODFC targets specific Office application data rather than replacing the full Windows user profile.
  2. FSLogix provides profile roaming, while separate storage protection covers deletion and corruption recovery.
  3. Profile detach and cache synchronization can lengthen sign-out when remote storage is saturated.
  4. Deleting content inside a virtual disk does not necessarily shrink its backing VHDX file immediately.

Explanation

Correct Answer

D:

Deleting content inside a virtual disk does not necessarily shrink its backing VHDX file immediately. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

ODFC targets specific Office application data rather than replacing the full Windows user profile. This describes the separate situation "An organization uses a third-party profile method but needs Outlook and other Office cache data to roam" but does not justify the selected fix for the current issue. The decisive behavior is: Deleting content inside a virtual disk does not necessarily shrink its backing VHDX file immediately.

B:

FSLogix provides profile roaming, while separate storage protection covers deletion and corruption recovery. This describes the separate situation "A tenant wants both profile portability and recoverable historical profile data" but does not justify the selected fix for the current issue. The decisive behavior is: Deleting content inside a virtual disk does not necessarily shrink its backing VHDX file immediately.

C:

Profile detach and cache synchronization can lengthen sign-out when remote storage is saturated. This describes the separate situation "Desktop sessions experience long logoff delays when very large profile disks upload changes" but does not justify the selected fix for the current issue. The decisive behavior is: Deleting content inside a virtual disk does not necessarily shrink its backing VHDX file immediately.

Question 661

An Azure Virtual Desktop administrator observes: An Azure Files share is replicated but administrators assume replication replaces all backups. Which response directly addresses this issue?

  1. Keep independent versioned backup and tested restore procedures for corrupted or deleted profile files
  2. Verify both share-level role assignment and NTFS permissions on the SMB path
  3. Create a supported capacity pool and volume with an appropriate service level and quota
  4. Check storage-service support and configure appropriate customer-managed encryption keys and identity permissions

Explanation

Correct Answer

A:

Keep independent versioned backup and tested restore procedures for corrupted or deleted profile files. Replication can propagate undesirable changes and does not itself ensure recoverable historical user data. This action directly addresses the conditions in the scenario.

Incorrect Answers

B:

Verify both share-level role assignment and NTFS permissions on the SMB path. This would be appropriate for the different task-specific situation "Users have Azure Files share-level RBAC but still get access denied creating their FSLogix container folder", because Azure Files identity-based SMB authorization combines share-level permission checks with file and folder ACLs. It does not directly resolve the stated condition, which calls for Keep independent versioned backup and tested restore procedures for corrupted or deleted profile files.

C:

Create a supported capacity pool and volume with an appropriate service level and quota. This would be appropriate for the different task-specific situation "An Azure NetApp Files profile storage design has no allocated capacity pool or volume throughput sizing", because Azure NetApp Files volume performance depends on service-level and capacity or throughput settings. It does not directly resolve the stated condition, which calls for Keep independent versioned backup and tested restore procedures for corrupted or deleted profile files.

D:

Check storage-service support and configure appropriate customer-managed encryption keys and identity permissions. This would be appropriate for the different task-specific situation "A profile storage solution must satisfy regulated encryption-at-rest policy with customer-managed keys", because Encryption requirements can include explicit key control beyond platform default encryption-at-rest. It does not directly resolve the stated condition, which calls for Keep independent versioned backup and tested restore procedures for corrupted or deleted profile files.

Question 662

The Azure Virtual Desktop team plans to "Plan subscription boundaries using governance, quota, billing and operational requirements" because: A multinational firm needs separate chargeback and quota controls for regional desktop environments. Which explanation supports the plan?

  1. Logon storms create short-lived authentication, disk and CPU spikes that sustained averages can hide.
  2. Subscription design influences available quotas and delegated administration beyond host pool configuration.
  3. A single resource-intensive app does not by itself prove every user needs dedicated desktop infrastructure.
  4. Windows Enterprise multi-session is designed for shared Azure Virtual Desktop session-host experiences.

Explanation

Correct Answer

B:

Subscription design influences available quotas and delegated administration beyond host pool configuration. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Logon storms create short-lived authentication, disk and CPU spikes that sustained averages can hide. This describes the separate situation "A capacity report shows brief 200-percent login spikes before employees start their shifts" but does not justify the selected fix for the current issue. The decisive behavior is: Subscription design influences available quotas and delegated administration beyond host pool configuration.

C:

A single resource-intensive app does not by itself prove every user needs dedicated desktop infrastructure. This describes the separate situation "A planning team proposes replacing all pooled desktops with personal VMs after noticing one application's high CPU use" but does not justify the selected fix for the current issue. The decisive behavior is: Subscription design influences available quotas and delegated administration beyond host pool configuration.

D:

Windows Enterprise multi-session is designed for shared Azure Virtual Desktop session-host experiences. This describes the separate situation "A company needs Windows 11 multi-session desktops for eligible Microsoft 365 users" but does not justify the selected fix for the current issue. The decisive behavior is: Subscription design influences available quotas and delegated administration beyond host pool configuration.

Question 663

An enterprise AVD deployment has this requirement: A team uses a generic Azure VM dashboard and assumes it covers all AVD application group connection failures. Choose the most appropriate implementation.

  1. Use session counts and host availability trends to refine scaling plan ramp-up times
  2. Analyze AVD session distribution and adjust load balancing or session limits as warranted
  3. Add AVD-specific diagnostic settings and workbook queries to the monitoring design
  4. Validate Azure Monitor Agent health, data collection rules and workspace destinations

Explanation

Correct Answer

C:

Add AVD-specific diagnostic settings and workbook queries to the monitoring design. General VM metrics cannot replace the service-specific events that explain remote resource access failures. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Use session counts and host availability trends to refine scaling plan ramp-up times. This would be appropriate for the different task-specific situation "A host pool shows insufficient available session capacity during a predictable daily spike", because Scaling before known peak demand helps ensure ready capacity is available at sign-in. It does not directly resolve the stated condition, which calls for Add AVD-specific diagnostic settings and workbook queries to the monitoring design.

B:

Analyze AVD session distribution and adjust load balancing or session limits as warranted. This would be appropriate for the different task-specific situation "Help desk staff see high CPU on one session host while others remain lightly loaded", because Misaligned host placement can cause hotspots despite sufficient aggregate pool capacity. It does not directly resolve the stated condition, which calls for Add AVD-specific diagnostic settings and workbook queries to the monitoring design.

D:

Validate Azure Monitor Agent health, data collection rules and workspace destinations. This would be appropriate for the different task-specific situation "Security events from Windows session hosts are not arriving at the central Log Analytics workspace", because Agent-based Windows event collection depends on matching collection rules and authorization. It does not directly resolve the stated condition, which calls for Add AVD-specific diagnostic settings and workbook queries to the monitoring design.

Question 664

The operations team reports the following symptom: A workstation group applies a GPO that denies remote interactive logon to the very users assigned to AVD. Which action should be taken first?

  1. Combine applicable Conditional Access device compliance controls with supported client sign-ins
  2. Select a supported Azure Files identity approach such as Microsoft Entra Kerberos and validate all prerequisites
  3. Correct time synchronization, DNS and identity service connectivity before repeating the join
  4. Correct Windows user-rights assignments and the applied domain policy for authorized AVD users

Explanation

Correct Answer

D:

Correct Windows user-rights assignments and the applied domain policy for authorized AVD users. Application group entitlement cannot override a host policy that explicitly denies the requested logon type. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Combine applicable Conditional Access device compliance controls with supported client sign-ins. This would be appropriate for the different task-specific situation "An organization wants to restrict all AVD logons to managed compliant devices", because Conditional Access can require device compliance signals before granting access to protected cloud applications. It does not directly resolve the stated condition, which calls for Correct Windows user-rights assignments and the applied domain policy for authorized AVD users.

B:

Select a supported Azure Files identity approach such as Microsoft Entra Kerberos and validate all prerequisites. This would be appropriate for the different task-specific situation "A cloud-only Entra user needs to reach a domain-dependent SMB profile share with unsupported identity configuration", because FSLogix profile storage authentication must be compatible with the host's chosen join and user identity model. It does not directly resolve the stated condition, which calls for Correct Windows user-rights assignments and the applied domain policy for authorized AVD users.

C:

Correct time synchronization, DNS and identity service connectivity before repeating the join. This would be appropriate for the different task-specific situation "A newly joined session host has device join errors caused by time skew and unreachable identity endpoints", because Modern identity sign-in and device registration rely on reachable endpoints and valid authentication timing. It does not directly resolve the stated condition, which calls for Correct Windows user-rights assignments and the applied domain policy for authorized AVD users.

Question 665

While preparing session hosts, an engineer discovers: A scaling plan powers off hosts too aggressively while employees have disconnected but resumable sessions. Which change best meets the requirement?

  1. Tune ramp-down session handling, disconnect timeout and deallocation policies
  2. Add AVD-specific diagnostic settings and workbook queries to the monitoring design
  3. Validate Azure Monitor Agent health, data collection rules and workspace destinations
  4. Choose one supported host power-management automation approach and disable conflicting schedules

Explanation

Correct Answer

A:

Tune ramp-down session handling, disconnect timeout and deallocation policies. Autoscale decisions must account for existing user session state to avoid disruption. This action directly addresses the conditions in the scenario.

Incorrect Answers

B:

Add AVD-specific diagnostic settings and workbook queries to the monitoring design. This would be appropriate for the different task-specific situation "A team uses a generic Azure VM dashboard and assumes it covers all AVD application group connection failures", because General VM metrics cannot replace the service-specific events that explain remote resource access failures. It does not directly resolve the stated condition, which calls for Tune ramp-down session handling, disconnect timeout and deallocation policies.

C:

Validate Azure Monitor Agent health, data collection rules and workspace destinations. This would be appropriate for the different task-specific situation "Security events from Windows session hosts are not arriving at the central Log Analytics workspace", because Agent-based Windows event collection depends on matching collection rules and authorization. It does not directly resolve the stated condition, which calls for Tune ramp-down session handling, disconnect timeout and deallocation policies.

D:

Choose one supported host power-management automation approach and disable conflicting schedules. This would be appropriate for the different task-specific situation "A team tries to run an Azure Automation shutdown script and AVD autoscale simultaneously on the same host pool", because Competing scalers can counteract one another and create unstable session-host availability. It does not directly resolve the stated condition, which calls for Tune ramp-down session handling, disconnect timeout and deallocation policies.

Question 666

For a deployment problem, "Operations sees VM CPU graphs but cannot search AVD user session connection failures", administrators choose "Collect the relevant AVD connection and error diagnostics and query them in Log Analytics". Why does that solve it?

  1. Aggregated monitoring can reduce alert fatigue without losing evidence of a shared incident.
  2. AVD service connection telemetry is distinct from Azure VM performance counters.
  3. Agent-based Windows event collection depends on matching collection rules and authorization.
  4. Scaling before known peak demand helps ensure ready capacity is available at sign-in.

Explanation

Correct Answer

B:

AVD service connection telemetry is distinct from Azure VM performance counters. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Aggregated monitoring can reduce alert fatigue without losing evidence of a shared incident. This describes the separate situation "The operations team receives hundreds of identical AVD sign-in alerts during one regional network fault" but does not justify the selected fix for the current issue. The decisive behavior is: AVD service connection telemetry is distinct from Azure VM performance counters.

C:

Agent-based Windows event collection depends on matching collection rules and authorization. This describes the separate situation "Security events from Windows session hosts are not arriving at the central Log Analytics workspace" but does not justify the selected fix for the current issue. The decisive behavior is: AVD service connection telemetry is distinct from Azure VM performance counters.

D:

Scaling before known peak demand helps ensure ready capacity is available at sign-in. This describes the separate situation "A host pool shows insufficient available session capacity during a predictable daily spike" but does not justify the selected fix for the current issue. The decisive behavior is: AVD service connection telemetry is distinct from Azure VM performance counters.

Question 667

A support ticket states: A user changes an application setting but the next session displays an older version after profile sync failures. What is the most targeted remediation?

  1. Use supported FSLogix storage plus an independently tested snapshot and backup strategy
  2. Use App Masking for user experience and entitlement presentation, plus real access or execution security controls
  3. Check container detach, pending writes and Cloud Cache synchronization logs
  4. Update and validate the roaming VHD path configuration on all targeted session hosts

Explanation

Correct Answer

C:

Check container detach, pending writes and Cloud Cache synchronization logs. The latest user profile changes must be committed to durable storage before a subsequent host loads them. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Use supported FSLogix storage plus an independently tested snapshot and backup strategy. This would be appropriate for the different task-specific situation "A tenant wants both profile portability and recoverable historical profile data", because FSLogix provides profile roaming, while separate storage protection covers deletion and corruption recovery. It does not directly resolve the stated condition, which calls for Check container detach, pending writes and Cloud Cache synchronization logs.

B:

Use App Masking for user experience and entitlement presentation, plus real access or execution security controls. This would be appropriate for the different task-specific situation "An administrator assumes FSLogix App Masking is a full security boundary against a malicious local administrator", because Application masking does not replace Windows privileges or security enforcement for privileged users. It does not directly resolve the stated condition, which calls for Check container detach, pending writes and Cloud Cache synchronization logs.

D:

Update and validate the roaming VHD path configuration on all targeted session hosts. This would be appropriate for the different task-specific situation "An FSLogix profile share is moved to a new UNC path but every host still refers to the prior location", because Hosts continue looking for profile disks according to configured locations until policies are updated. It does not directly resolve the stated condition, which calls for Check container detach, pending writes and Cloud Cache synchronization logs.

Question 668

During an Azure Virtual Desktop migration, this problem appears: An admin wants to know which session hosts actually accepted connections before a maintenance incident. Which solution fits?

  1. Validate Azure Monitor Agent health, data collection rules and workspace destinations
  2. Add AVD-specific diagnostic settings and workbook queries to the monitoring design
  3. Choose one supported host power-management automation approach and disable conflicting schedules
  4. Query historical connection events and host session associations in Log Analytics

Explanation

Correct Answer

D:

Query historical connection events and host session associations in Log Analytics. Historical diagnostics can reconstruct the involved hosts beyond the currently active session list. This action directly addresses the conditions in the scenario.

Incorrect Answers

A:

Validate Azure Monitor Agent health, data collection rules and workspace destinations. This would be appropriate for the different task-specific situation "Security events from Windows session hosts are not arriving at the central Log Analytics workspace", because Agent-based Windows event collection depends on matching collection rules and authorization. It does not directly resolve the stated condition, which calls for Query historical connection events and host session associations in Log Analytics.

B:

Add AVD-specific diagnostic settings and workbook queries to the monitoring design. This would be appropriate for the different task-specific situation "A team uses a generic Azure VM dashboard and assumes it covers all AVD application group connection failures", because General VM metrics cannot replace the service-specific events that explain remote resource access failures. It does not directly resolve the stated condition, which calls for Query historical connection events and host session associations in Log Analytics.

C:

Choose one supported host power-management automation approach and disable conflicting schedules. This would be appropriate for the different task-specific situation "A team tries to run an Azure Automation shutdown script and AVD autoscale simultaneously on the same host pool", because Competing scalers can counteract one another and create unstable session-host availability. It does not directly resolve the stated condition, which calls for Query historical connection events and host session associations in Log Analytics.

Question 669

A change record states "Apply Conditional Access and secure administrative access workflows to sensitive AVD operations" after observing "Privileged operators connect from untrusted devices to production session hosts without strong authentication controls". What is the key supporting principle?

  1. Strong identity and device conditions reduce the risk of unauthorized high-impact management activity.
  2. Confidential computing features protect eligible data in use with hardware-backed isolation mechanisms.
  3. Application control policies can restrict execution of software not approved by the organization.
  4. A running security sensor without current signatures can miss newly recognized threats.

Explanation

Correct Answer

A:

Strong identity and device conditions reduce the risk of unauthorized high-impact management activity. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

B:

Confidential computing features protect eligible data in use with hardware-backed isolation mechanisms. This describes the separate situation "Confidential workloads need stronger isolation of in-use session-host memory from underlying host access" but does not justify the selected fix for the current issue. The decisive behavior is: Strong identity and device conditions reduce the risk of unauthorized high-impact management activity.

C:

Application control policies can restrict execution of software not approved by the organization. This describes the separate situation "An engineering group wants only approved executable programs to launch in a high-security pooled desktop" but does not justify the selected fix for the current issue. The decisive behavior is: Strong identity and device conditions reduce the risk of unauthorized high-impact management activity.

D:

A running security sensor without current signatures can miss newly recognized threats. This describes the separate situation "One AVD VM image has outdated malware signatures because it has not contacted security update services" but does not justify the selected fix for the current issue. The decisive behavior is: Strong identity and device conditions reduce the risk of unauthorized high-impact management activity.

Question 670

The team adopts "Configure and validate shared computer activation for eligible Microsoft 365 Apps installations" for this AVD requirement: "A shared Windows multi-session host prompts each Microsoft 365 Apps user to activate Office as if it were a personal machine". Which explanation is correct?

  1. Managed browser extension policies control allowed and required extensions without manual per-user installation.
  2. Shared computer activation enables supported Microsoft 365 Apps licensing on shared-session environments.
  3. Application package lifecycle changes may require a new session or supported refresh process to take effect.
  4. Application lifecycle controls determine availability, whereas user profile preservation is a separate concern.

Explanation

Correct Answer

B:

Shared computer activation enables supported Microsoft 365 Apps licensing on shared-session environments. This is the specific underlying behavior that makes the proposed remediation fit the stated problem.

Incorrect Answers

A:

Managed browser extension policies control allowed and required extensions without manual per-user installation. This describes the separate situation "A browser extension must be available only for a permitted business department" but does not justify the selected fix for the current issue. The decisive behavior is: Shared computer activation enables supported Microsoft 365 Apps licensing on shared-session environments.

C:

Application package lifecycle changes may require a new session or supported refresh process to take effect. This describes the separate situation "An operations team expects replacing an App attach package image to update every existing user session instantly" but does not justify the selected fix for the current issue. The decisive behavior is: Shared computer activation enables supported Microsoft 365 Apps licensing on shared-session environments.

D:

Application lifecycle controls determine availability, whereas user profile preservation is a separate concern. This describes the separate situation "An organization must remove an unapproved application from all new AVD sessions while preserving existing profiles" but does not justify the selected fix for the current issue. The decisive behavior is: Shared computer activation enables supported Microsoft 365 Apps licensing on shared-session environments.

Configuring and Operating Microsoft Azure Virtual Desktop (AZ-140) Practice Tests

Purchase Individually

  • Premium File

    372 Questions & Answers
    Last Update: Oct 25, 2026

    $76.99
    $69.99
  • Training Course

    79 Lectures

    $43.99
    $39.99
  • Study Guide

    430 Pages

    $43.99
    $39.99

SPECIAL OFFER: GET 10% OFF
This is ONE TIME OFFER

You save
10%

Enter Your Email Address to Receive Your 10% Off Discount Code

SPECIAL OFFER: GET 10% OFF

You save
10%

Use Discount Code:

A confirmation link was sent to your e-mail.

Please check your mailbox for a message from support@examlabs.com and follow the directions.

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your email address below to get started with our interactive software demo of your free trial.

  • Realistic exam simulation and exam editor with preview functions
  • Whole exam in a single file with several different question types
  • Customizable exam-taking mode & detailed score reports