Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by Microsoft
Exam Format
Registration
Validity
Skills this practice test covers
- Plan host pools and session hosts, and build their images.
- Design networking and storage for Azure Virtual Desktop, including FSLogix storage.
- Configure identity with Microsoft Entra ID, Conditional Access policies and Azure RBAC.
- Deliver apps with application groups, RemoteApp and MSIX app attach.
- Store user profiles with FSLogix profile and office containers.
- Monitor with Azure Monitor, and plan autoscaling, updates, backup and disaster recovery.
Explore related topics
AZ-140 exam content
4 domains · 50 topics · 251 of 263 questions sorted by domain
Plan and implement an Azure Virtual Desktop infrastructure88 questions
This is the largest area: the groundwork of a deployment. It covers networking, storage, host pools and session hosts, and the images those hosts run.
Skills tested
- Assess network capacity and design networking, including RDP Shortpath and Private Link.
- Plan storage for user data and FSLogix components, including Azure NetApp Files.
- Create and configure host pools and session hosts in the Azure portal.
- Build, update and store session host images with the Azure Compute Gallery.
Questions by topic
- Plan and implement Remote Desktop Protocol (RDP) Shortpath and quality of service (QoS) policies6
- Create an image by using Azure virtual machine Image Builder7
- Create an image manually6
- Automate creation of Azure Virtual Desktop hosts and host pools by using PowerShell, Azure CLI, Azure Resource Manager templates (ARM templates), and Bicep files9
- Assess network capacity and speed requirements for Azure Virtual Desktop4
- Design an Azure Virtual Desktop configuration for performance requirements5
- Design network configuration for session hosts to meet requirements for Azure Virtual Desktop4
- Implement Azure NetApp Files for Azure Virtual Desktop4
- Plan and implement image storage, including Azure compute gallery6
- Configure host pool and session host settings5
- Implement host pools and session hosts8
- Implement storage for FSLogix components3
- Select an identity scenario for Azure Virtual Desktop, including Active Directory Domain Services (AD DS), Microsoft Entra ID, and Microsoft Entra Domain Services1
- Implement and manage network security for connections to Azure Virtual Desktop, including user defined routes (UDRs), network security groups (NSGs), and Azure Firewall1
- Assign and unassign personal desktops to users1
- Create a session host by using a custom image9
- Plan and implement an Azure Private Link solution for Azure Virtual7
- Plan and implement a disaster recovery plan for Azure Virtual Desktop2
Plan and implement identity and security49 questions
This area protects access to the deployment. It covers the identity model, role-based access control, Conditional Access, authentication, and session host security.
Skills tested
- Choose an identity scenario across Active Directory Domain Services and Microsoft Entra ID.
- Set Azure roles, Conditional Access policies and single sign-on for connections.
- Protect session hosts with Microsoft Defender and network security controls.
- Configure authentication options such as multifactor and passwordless sign-in.
Questions by topic
- Configure Azure Bastion or just-in-time (JIT) for administrative access to session hosts5
- Configure single sign-on5
- Configure session host protection by using Microsoft Defender for Endpoint, including onboarding and scanning options5
- Plan and implement Azure roles and role-based access control (RBAC) for Azure Virtual Desktop6
- Plan and implement Conditional Access policies for connections to Azure Virtual Desktop8
- Select an identity scenario for Azure Virtual Desktop, including Active Directory Domain Services (AD DS), Microsoft Entra ID, and Microsoft Entra Domain Services4
- Implement and manage network security for connections to Azure Virtual Desktop, including user defined routes (UDRs), network security groups (NSGs), and Azure Firewall5
- Plan for and implement Confidential VM and Trusted Launch security features for Azure Virtual Desktop session host provisioning4
- Plan and implement authentication options in Azure Virtual Desktop, including passwordless, smart card, and multifactor authentication7
Plan and implement user environments and apps76 questions
This area shapes what users see and run. It covers FSLogix profiles, client and session settings, and the ways apps reach a session host.
Skills tested
- Configure FSLogix Profile Containers, Office Containers and Cloud Cache.
- Set client, device redirection and Remote Desktop Protocol properties.
- Publish apps through application groups and RemoteApp.
- Deliver apps on demand with MSIX app attach.
Questions by topic
- Configure dynamic application delivery by using app attach5
- Configure FSLogix Cloud Cache4
- Implement storage for FSLogix components1
- Implement the Start Virtual Machine on Connect feature9
- Implement FSLogix application masking7
- Configure printing and Universal Print6
- Configure FSLogix Profile Containers5
- Implement and manage Microsoft Teams, including the Remote Desktop WebRTC Redirector Service5
- Configure Remote Desktop Protocol (RDP) properties on a host pool4
- Implement and manage Microsoft 365 apps on Azure Virtual Desktop session hosts4
- Assign and unassign personal desktops to users3
- Create and configure an application group3
- Assign users to application groups8
- Configure FSLogix Office Containers4
- Implement and manage OneDrive, including multisession environments4
- Create an application package for app attach4
Monitor and maintain an Azure Virtual Desktop infrastructure38 questions
This area keeps the deployment healthy and recoverable. It covers monitoring with Azure Monitor, autoscaling, and updates, backup and disaster recovery.
Skills tested
- Collect logs and watch the deployment with Azure Monitor and Insights workbooks.
- Tune session host capacity and set up autoscaling in host pools.
- Plan updates, backup and a disaster recovery plan for the deployment.
Questions by topic
- Implement autoscaling in host pools7
- Monitor Azure Virtual Desktop by using Azure Monitor6
- Plan and implement a disaster recovery plan for Azure Virtual Desktop4
- Monitor and manage Azure Virtual Desktop services5
- Monitor and manage active sessions and application groups4
- Recommend an update strategy for session hosts4
- Design and implement a backup strategy for Azure Virtual Desktop8
Requirements
- No formal prerequisites: anyone can book the exam.
- Recommended: experience with Azure compute, networking, storage and identity.
- Recommended: experience managing end-user desktops and Windows virtualization.
About the AZ-140 exam
AZ-140 is Microsoft's Azure Virtual Desktop Specialty exam, for administrators who deliver Windows desktops and apps from Azure. It spans building the infrastructure, securing identity and access, shaping user environments and apps, and ongoing monitoring. Passing earns the Azure Virtual Desktop Specialty credential. The exam assumes experience with Azure compute, networking, storage and identity, plus Windows virtualization.
The practice test follows the four skill areas, with the most questions in planning and building the infrastructure, the largest area on the exam. Each answer has an explanation that shows how a setting behaves, such as which FSLogix container follows a user between session hosts. Study Mode suits the identity and security area, where Conditional Access and role-based access control must be kept straight. Brainy AI Assistant can explain how a host pool differs from an application group, or why a session host starts on connect.
How to earn the certification
- Earns
- Microsoft Certified: Azure Virtual Desktop SpecialtySpecialty
The certification renews each year by passing a free online assessment on Microsoft Learn.
How to prepare for AZ-140
- 1
Build a small AVD lab
Create a host pool with one or two session hosts in an Azure subscription. Doing each task by hand, from image to application group, fixes the service far better than reading about it.
- 2
Trace a user sign-in
Follow one user from Microsoft Entra ID sign-in, through Conditional Access, to a published app. Seeing the identity and security path end to end makes that area concrete.
- 3
Spend the most time on infrastructure
The infrastructure area is the largest. Practise networking, storage, host pools and image creation until each can be set up without a guide.
- 4
Set up FSLogix by hand
Configure FSLogix Profile Containers and Office Containers against a storage account. Then sign in on two session hosts to watch the profile follow the user.
- 5
Take a timed run last
Work through the AZ-140 practice test in Study Mode one area at a time, then in Timed Mode. Ask Brainy AI Assistant about each missed question, such as why a container or a Conditional Access rule behaved as it did.
Start a timed AZ-140run
Microsoft offers the instructor-led course AZ-140T00: Configuring and Operating Azure Virtual Desktop, along with the Azure Virtual Desktop learning path on Microsoft Learn.
Who AZ-140 is for
- Desktop and server administrators who run Azure Virtual Desktop.
- Azure administrators who deliver Windows apps to remote and hybrid workers.
- Engineers who add a virtual desktop specialty to broader Azure skills.
Typical job titles: Azure administrator · Desktop administrator · Virtual desktop engineer · Cloud engineer · Systems administrator
AZ-140 glossary
18 terms from the exam objectives and the vendor's official material, each defined in a sentence.
- Application group
- A set of apps, or a desktop, published from a host pool and assigned to users.
- Autoscaling
- Starting and stopping session hosts automatically to match demand.
- Azure Compute Gallery
- An Azure service that stores and versions session host images for reuse.
- Azure Monitor
- The Azure service that collects logs and metrics to watch a deployment's health.
- Azure Private Link
- A way to reach Azure Virtual Desktop over a private network connection instead of the public internet.
- Azure Virtual Desktop
- Microsoft's service for running Windows desktops and apps for users from Azure.
- Conditional Access
- Policies that allow or block a sign-in based on conditions such as device, location or risk.
- FSLogix
- The profile technology that stores a user's Windows profile so it follows them between session hosts.
- FSLogix Cloud Cache
- An FSLogix option that keeps profile copies in more than one storage location for resilience.
- FSLogix Office Containers
- FSLogix containers that hold only the Microsoft 365 cache, such as Outlook data.
- FSLogix Profile Containers
- FSLogix containers that hold a user's full Windows profile on shared storage.
- Host pool
- A group of identical session host virtual machines that users connect to.
- Microsoft Entra ID
- Microsoft's cloud identity service, used to sign users in to Azure Virtual Desktop.
- MSIX app attach
- A way to deliver apps to session hosts on demand, kept separate from the host image.
- Remote Desktop Protocol (RDP) Shortpath
- A feature that sets up a direct transport for session traffic to lower latency.
- RemoteApp
- A single application published so it runs on a session host but appears on the user's own device.
- Role-based access control (RBAC)
- Granting rights by assigning roles, so each person has only the access they need.
- Session host
- A virtual machine in a host pool that runs the desktops and apps users sign in to.